DeutschShown in its original language — a full translation is planned for a future version.
AMD Prozessor: Mehrere Schwachstellen
view advisory published 2024-02-13
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessor und Dell BIOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen oder einen Denial of Service auszulösen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20577US | — | — | ||
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution. | ||||
| CVE-2023-20576US | —OT elevated | — | ||
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation. | ||||
| CVE-2023-20587US | — | — | ||
Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.
| ||||
| CVE-2023-20579US | medium6.0 | — | ||
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integri… | ||||
02
references
External citations — patches, advisories, analysis.
- HP Security Bulletin HPSBHF03949 vom 2024-06-07external
- HPE Security Bulletin vom 2024-07-03external
- Lenovo Security Advisory LEN-150692 vom 2024-02-14external
- WID-SEC-W-2024-0369 - CSAF Versionself
- WID-SEC-2024-0369 - Portal Versionself
- AMD Security Bulletins vom 2024-02-13external
- Dell Knowledge Base Article vom 2024-02-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan