CVE-2023-20524: High severity amd epyc 72f3 firmware vulnerability

Published May 9, 2023

Updated

An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.

Affected Software

192 affected components

All of the following

AMD Epyc 72f3 Firmware=milanpi_1.0.0.5

AMD Epyc 72f3

All of the following

AMD Epyc 7313 Firmware=milanpi_1.0.0.5

AMD Epyc 7313

All of the following

AMD Epyc 7313p Firmware=milanpi_1.0.0.5

AMD Epyc 7313p

All of the following

AMD Epyc 7343 Firmware=milanpi_1.0.0.5

AMD Epyc 7343

All of the following

AMD Epyc 7373x Firmware=milanpi_1.0.0.5

AMD Epyc 7373x

All of the following

AMD Epyc 73f3 Firmware=milanpi_1.0.0.5

AMD Epyc 73f3

All of the following

AMD Epyc 7413 Firmware=milanpi_1.0.0.5

AMD Epyc 7413

All of the following

AMD Epyc 7443 Firmware=milanpi_1.0.0.5

AMD Epyc 7443

All of the following

AMD Epyc 7443p Firmware=milanpi_1.0.0.5

AMD Epyc 7443p

All of the following

AMD Epyc 7453 Firmware=milanpi_1.0.0.5

AMD Epyc 7453

All of the following

AMD Epyc 7473x Firmware=milanpi_1.0.0.5

AMD Epyc 7473x

All of the following

AMD Epyc 74f3 Firmware=milanpi_1.0.0.5

AMD Epyc 74f3

All of the following

AMD Epyc 7513 Firmware=milanpi_1.0.0.5

AMD Epyc 7513

All of the following

AMD Epyc 7543 Firmware=milanpi_1.0.0.5

AMD Epyc 7543

All of the following

AMD Epyc 7543p Firmware=milanpi_1.0.0.5

AMD Epyc 7543p

All of the following

AMD Epyc 7573x Firmware=milanpi_1.0.0.5

AMD Epyc 7573x

All of the following

AMD Epyc 75f3 Firmware=milanpi_1.0.0.5

AMD Epyc 75f3

All of the following

AMD Epyc 7643 Firmware=milanpi_1.0.0.5

AMD Epyc 7643

All of the following

AMD Epyc 7663 Firmware=milanpi_1.0.0.5

AMD Epyc 7663

All of the following

AMD Epyc 7713 Firmware=milanpi_1.0.0.5

AMD Epyc 7713

All of the following

AMD Epyc 7713p Firmware=milanpi_1.0.0.5

AMD Epyc 7713p

All of the following

AMD Epyc 7763 Firmware=milanpi_1.0.0.5

AMD Epyc 7763

All of the following

AMD Epyc 7773x Firmware=milanpi_1.0.0.5

AMD Epyc 7773x

All of the following

AMD Epyc 7232p Firmware=romepi_1.0.0.c

AMD Epyc 7232p

All of the following

AMD Epyc 7252 Firmware=romepi_1.0.0.c

AMD Epyc 7252

All of the following

AMD Epyc 7262 Firmware=romepi_1.0.0.c

AMD Epyc 7262

All of the following

AMD Epyc 7272 Firmware=romepi_1.0.0.c

AMD Epyc 7272

All of the following

AMD Epyc 7282 Firmware=romepi_1.0.0.c

AMD Epyc 7282

All of the following

AMD Epyc 7302 Firmware=romepi_1.0.0.c

AMD Epyc 7302

All of the following

AMD Epyc 7302p Firmware=romepi_1.0.0.c

AMD Epyc 7302p

All of the following

AMD Epyc 7352 Firmware=romepi_1.0.0.c

AMD Epyc 7352

All of the following

AMD Epyc 7402 Firmware=romepi_1.0.0.c

AMD Epyc 7402

All of the following

AMD Epyc 7402p Firmware=romepi_1.0.0.c

AMD Epyc 7402p

All of the following

AMD Epyc 7452 Firmware=romepi_1.0.0.c

AMD Epyc 7452

All of the following

AMD Epyc 7502 Firmware=romepi_1.0.0.c

AMD Epyc 7502

All of the following

AMD Epyc 7502p Firmware=romepi_1.0.0.c

AMD Epyc 7502p

All of the following

AMD Epyc 7532 Firmware=romepi_1.0.0.c

AMD Epyc 7532

All of the following

AMD Epyc 7542 Firmware=romepi_1.0.0.c

AMD Epyc 7542

All of the following

AMD Epyc 7552 Firmware=romepi_1.0.0.c

AMD Epyc 7552

All of the following

AMD Epyc 7642 Firmware=romepi_1.0.0.c

AMD Epyc 7642

All of the following

AMD Epyc 7662 Firmware=romepi_1.0.0.c

AMD Epyc 7662

All of the following

AMD Epyc 7702 Firmware=romepi_1.0.0.c

AMD Epyc 7702

All of the following

AMD Epyc 7702p Firmware=romepi_1.0.0.c

AMD Epyc 7702p

All of the following

AMD Epyc 7742 Firmware=romepi_1.0.0.c

AMD Epyc 7742

All of the following

AMD Epyc 7f32 Firmware=romepi_1.0.0.c

AMD Epyc 7f32

All of the following

AMD Epyc 7f52 Firmware=romepi_1.0.0.c

AMD Epyc 7f52

All of the following

AMD Epyc 7f72 Firmware=romepi_1.0.0.c

AMD Epyc 7f72

All of the following

AMD Epyc 7h12 Firmware=romepi_1.0.0.c

AMD Epyc 7h12

AMD Epyc 72f3 Firmware=milanpi_1.0.0.5

AMD Epyc 72f3

AMD Epyc 7313 Firmware=milanpi_1.0.0.5

AMD Epyc 7313

AMD Epyc 7313p Firmware=milanpi_1.0.0.5

AMD Epyc 7313p

AMD Epyc 7343 Firmware=milanpi_1.0.0.5

AMD Epyc 7343

AMD Epyc 7373x Firmware=milanpi_1.0.0.5

AMD Epyc 7373x

AMD Epyc 73f3 Firmware=milanpi_1.0.0.5

AMD Epyc 73f3

AMD Epyc 7413 Firmware=milanpi_1.0.0.5

AMD Epyc 7413

AMD Epyc 7443 Firmware=milanpi_1.0.0.5

AMD Epyc 7443

AMD Epyc 7443p Firmware=milanpi_1.0.0.5

AMD Epyc 7443p

AMD Epyc 7453 Firmware=milanpi_1.0.0.5

AMD Epyc 7453

AMD Epyc 7473x Firmware=milanpi_1.0.0.5

AMD Epyc 7473x

AMD Epyc 74f3 Firmware=milanpi_1.0.0.5

AMD Epyc 74f3

AMD Epyc 7513 Firmware=milanpi_1.0.0.5

AMD Epyc 7513

AMD Epyc 7543 Firmware=milanpi_1.0.0.5

AMD Epyc 7543

AMD Epyc 7543p Firmware=milanpi_1.0.0.5

AMD Epyc 7543p

AMD Epyc 7573x Firmware=milanpi_1.0.0.5

AMD Epyc 7573x

AMD Epyc 75f3 Firmware=milanpi_1.0.0.5

AMD Epyc 75f3

AMD Epyc 7643 Firmware=milanpi_1.0.0.5

AMD Epyc 7643

AMD Epyc 7663 Firmware=milanpi_1.0.0.5

AMD Epyc 7663

AMD Epyc 7713 Firmware=milanpi_1.0.0.5

AMD Epyc 7713

AMD Epyc 7713p Firmware=milanpi_1.0.0.5

AMD Epyc 7713p

AMD Epyc 7763 Firmware=milanpi_1.0.0.5

AMD Epyc 7763

AMD Epyc 7773x Firmware=milanpi_1.0.0.5

AMD Epyc 7773x

AMD Epyc 7232p Firmware=romepi_1.0.0.c

AMD Epyc 7232p

AMD Epyc 7252 Firmware=romepi_1.0.0.c

AMD Epyc 7252

AMD Epyc 7262 Firmware=romepi_1.0.0.c

AMD Epyc 7262

AMD Epyc 7272 Firmware=romepi_1.0.0.c

AMD Epyc 7272

AMD Epyc 7282 Firmware=romepi_1.0.0.c

AMD Epyc 7282

AMD Epyc 7302 Firmware=romepi_1.0.0.c

AMD Epyc 7302

AMD Epyc 7302p Firmware=romepi_1.0.0.c

AMD Epyc 7302p

AMD Epyc 7352 Firmware=romepi_1.0.0.c

AMD Epyc 7352

AMD Epyc 7402 Firmware=romepi_1.0.0.c

AMD Epyc 7402

AMD Epyc 7402p Firmware=romepi_1.0.0.c

AMD Epyc 7402p

AMD Epyc 7452 Firmware=romepi_1.0.0.c

AMD Epyc 7452

AMD Epyc 7502 Firmware=romepi_1.0.0.c

AMD Epyc 7502

AMD Epyc 7502p Firmware=romepi_1.0.0.c

AMD Epyc 7502p

AMD Epyc 7532 Firmware=romepi_1.0.0.c

AMD Epyc 7532

AMD Epyc 7542 Firmware=romepi_1.0.0.c

AMD Epyc 7542

AMD Epyc 7552 Firmware=romepi_1.0.0.c

AMD Epyc 7552

AMD Epyc 7642 Firmware=romepi_1.0.0.c

AMD Epyc 7642

AMD Epyc 7662 Firmware=romepi_1.0.0.c

AMD Epyc 7662

AMD Epyc 7702 Firmware=romepi_1.0.0.c

AMD Epyc 7702

AMD Epyc 7702p Firmware=romepi_1.0.0.c

AMD Epyc 7702p

AMD Epyc 7742 Firmware=romepi_1.0.0.c

AMD Epyc 7742

AMD Epyc 7f32 Firmware=romepi_1.0.0.c

AMD Epyc 7f32

AMD Epyc 7f52 Firmware=romepi_1.0.0.c

AMD Epyc 7f52

AMD Epyc 7f72 Firmware=romepi_1.0.0.c

AMD Epyc 7f72

AMD Epyc 7h12 Firmware=romepi_1.0.0.c

AMD Epyc 7h12

Event History

May 9, 2023

CVE Published

via MITRE·06:36 PM

Data Sourced

via MITRE·06:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2023-20524?

CVE-2023-20524 is classified as a medium severity vulnerability due to the potential for an out-of-bounds write that could lead to integrity loss.

How do I fix CVE-2023-20524?

To fix CVE-2023-20524, you should update the affected AMD Epyc firmware to version milanpi_1.0.0.5 or later.

Which products are affected by CVE-2023-20524?

CVE-2023-20524 affects AMD Epyc processors with milanpi firmware version 1.0.0.5.

What type of vulnerability is CVE-2023-20524?

CVE-2023-20524 is an out-of-bounds write vulnerability that can potentially compromise system integrity.

Can CVE-2023-20524 be exploited remotely?

CVE-2023-20524 requires an attacker with a compromised access point to exploit the vulnerability, indicating a local or adjacent network threat.

CVE-2023-20524: High severity amd epyc 72f3 firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2023-20524?

How do I fix CVE-2023-20524?

Which products are affected by CVE-2023-20524?

What type of vulnerability is CVE-2023-20524?

Can CVE-2023-20524 be exploited remotely?

Company

Resources

Contact