{"affected":[{"defaultStatus":"affected","product":"2nd Gen AMD EPYC™ Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"RomePI 1.0.0.H"}]},{"defaultStatus":"affected","product":"3rd Gen AMD EPYC™ Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"MilanPI 1.0.0.C"}]},{"defaultStatus":"affected","product":"4th Gen AMD EPYC™ Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"GenoaPI 1.0.0.8"}]},{"defaultStatus":"affected","product":"AMD Instinct™ MI300A","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"MI300 SR5 PI 1.0.0.1"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Desktop Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.B"},{"status":"unaffected","version":"ComboAM4 1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 5000 Series Desktop Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.B"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.B"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 7000 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM5 1.0.0.7b"}]},{"defaultStatus":"affected","product":"AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.B"},{"status":"unaffected","version":"ComboAM4 1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.B"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ 3000 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"CastlePeakPI-SP3r3 1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.7"},{"status":"unaffected","version":"CastlePeakWSPI-sWRX8 1.0.0.C"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 5000WX Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.7"}]},{"defaultStatus":"affected","product":"AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"PicassoPI-FP5 1.0.1.0"}]},{"defaultStatus":"affected","product":"AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"PollockPI-FT5 1.0.0.6"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"PicassoPI-FP5 1.0.1.0"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"RenoirPI-FP6 1.0.0.D"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"CezannePI-FP6 1.0.0.F"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"MendocinoPI-FT6 1.0.0.6"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"RembrandtPI-FP7 1.0.0.9b"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"RembrandtPI-FP7 1.0.0.9b"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"CezannePI-FP6 1.0.0.F"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"CezannePI-FP6 1.0.0.F"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"PhoenixPI-FP8-FP7 1.0.0.2"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 7045 Series Mobile Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"DragonRangeFL1PI 1.0.0.3a"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 3000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"Snowyowl PI 1.1.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7002","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbRomePI-SP3 1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7003","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbMilanPI-SP3 1.0.0.8"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9003","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbGenoaPI-SP5 1.0.0.3"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded R1000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedPI-FP5 1.2.0.A"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded R2000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedPI-FP5 1.0.0.2"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded 5000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbAM4PI 1.0.0.4"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded V1000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedPI-FP5 1.2.0.A"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded V2000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedPI-FP6 1.0.0.9"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Embedded V3000","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedPI-FP7r2 1.0.0.8"}]}],"cveId":"CVE-2023-20577","cwes":["CWE-121"],"description":"A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.","epss":{"date":"2026-11-03","percentile":0.04416,"score":0.00152},"exploits":[],"kev":null,"metrics":[{"score":7.4,"severity":"high","source":"CNA: AMD","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793718154068,"publishedAt":1788379030678,"references":[{"source":"CNA: AMD","tags":[],"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html"}],"remediation":[],"revision":"f6f95c047dcb5ab903e70a2b682bba90ccd0f4118bb6a9483a8756273d89d612","sources":[{"modifiedAt":1793718154068,"name":"CNA: AMD","retrievedAt":1793718499648,"url":"https://www.cve.org/CVERecord?id=CVE-2023-20577"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793718533202,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-20577"}],"ssvc":{"assessedAt":1788407803507,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2023-20577","updatedAt":1793718533202}