{"affected":[],"cveId":"CVE-2023-20576","cwes":["CWE-345"],"description":"Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.7,"severity":"high","source":"NVD: psirt@amd.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"}],"modifiedAt":1794312600177,"publishedAt":1788380252950,"references":[{"source":"psirt@amd.com","tags":[],"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html"}],"remediation":[],"revision":"f74bd2d0729c4e7e1a63648216bf297267e725619eac36c8b332dc5aeccf18a2","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313098389,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20576"}],"ssvc":{"assessedAt":1788407802433,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2023-20576","updatedAt":1794313098389}