CVE-2023-20508

Published Feb 11, 2025 CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Description
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-24687 Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

epss

{'score': 0.00021}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.
Weaknesses CWE-1284
References
Metrics cvssV3_1

{'score': 5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Feb 12, 2025, 3:33 PM
Reserved
Oct 27, 2022, 6:53 PM
Status
Deferred
Published
Feb 12, 2025, 12:15 AM
Modified
Jun 17, 2026, 5:30 AM