PT-2023-1483 · Amd · Amd Secure Processor

Published 2023-01-10 · Updated 2025-04-07 · CVE-2023-20523

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (ASP) (affected versions not specified)

Description The issue is related to a Time-of-Check-to-Time-of-Use (TOCTOU) vulnerability in the ASP, which may allow a physical attacker to write beyond buffer bounds. This could potentially lead to a loss of integrity or denial of service. The vulnerability is also described as a race condition error when using a shared resource, which could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Time Of Check To Time Of Use

Weakness Enumeration

CWE-362

CWE-367

Related Identifiers

BDU:2023-00893

CVE-2023-20523

Affected Products

Amd Secure Processor

References · 7

• https://bdu.fstec.ru/vul/2023-00893 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20523 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20523 · Vendor Advisory
• https://t.me/cvenotify/118034 · Telegram Post
• https://support.lenovo.com/us/en/product_security/LEN-87730 · Note
• https://vuldb.com/ru/?id.218000 · Note