PT-2023-17451 · Unknown+1 · Asp Bootloader+1

Published 2023-11-14 · Updated 2025-02-12 · CVE-2023-20526

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASP Bootloader (affected versions not specified)

Description The issue is related to insufficient input validation in the ASP Bootloader, which may allow a privileged attacker with physical access to expose the contents of ASP memory. This could potentially lead to a loss of confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-20526

OPENSUSE-SU-2024:13475-1

OPENSUSE-SU-2025:14772-1

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Affected Products

Asp Bootloader

Suse

References · 46

• https://osv.dev/vulnerability/openSUSE-SU-2024:13475-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20526 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14772-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4655-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4664-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20526 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2376-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4660-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4665-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-46744 · Note
• https://bugzilla.suse.com/1215831 · Note