High · 7.5 CVE-2023-20522 EUVD-2023-24701GHSA-4434-6fgr-q9c4

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.

Published Jan 10, 2023 · Updated Apr 7, 2025 · Assigned by AMD

Vendor: AMD Product: 2nd Gen EPYC Product: 3rd Gen EPYC

Description

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.

Affected products

Vendor	Product	Affected	Fixed
AMD	2nd Gen EPYC	various	—
AMD	3rd Gen EPYC	various	—

Advisories 1

WID-SEC-2023-0061 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 10, 2023

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 vendor-advisory