rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-20268 Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.&nbsp;

This vulnerability is due to insufficient management of resources when handling certain types of traffic. An attacker could exploit this vulnerability by sending a series of specific wireless packets to an affected device. A successful exploit could allow the attacker to consume resources on an affected device. A sustained attack could lead to the disruption of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel and intermittent loss of wireless client traffic.
Problem types: cwe_id: CWE-400
description: Uncontrolled Resource Consumption
Affected products: vendor: Cisco
product: Cisco Aironet Access Point Software
default_status: unknown
vendor: Cisco
product: Cisco Aironet Access Point Software (IOS XE Controller)
default_status: unknown
vendor: Cisco
product: Cisco Business Wireless Access Point Software
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
baseScore: 4.7
baseSeverity: MEDIUM
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
Published: 2023-09-27T17:22:55.840Z
CVE-2023-20269 
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.
 This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:
  Identify valid credentials that could then be used to establish an unauthorized remote access VPN session. Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).  Notes:
  Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured. This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.  Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.
Problem types: cwe_id: CWE-288
description: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Cisco
product: Cisco Adaptive Security Appliance (ASA) Software
vendor: Cisco
product: Cisco Firepower Threat Defense Software
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
baseScore: 5
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
Published: 2023-09-06T17:09:29.663Z
CVE-2023-20270 
A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error-checking when the Snort 3 detection engine is processing SMB traffic. An attacker could exploit this vulnerability by sending a crafted SMB packet stream through an affected device. A successful exploit could allow the attacker to cause the Snort process to reload, resulting in a DoS condition.
Problem types: cwe_id: CWE-20
description: Improper Input Validation
Affected products: vendor: Cisco
product: Cisco Firepower Threat Defense Software
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
baseScore: 5.8
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
Published: 2023-11-01T16:51:13.156Z
CVE-2023-20271 
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Cisco
product: Cisco Prime Infrastructure
vendor: Cisco
product: Cisco Evolved Programmable Network Manager (EPNM)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
baseScore: 6.5
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
Published: 2024-01-17T16:56:25.553Z
CVE-2023-20272 
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could exploit this vulnerability by uploading a malicious file to the web interface. A successful exploit could allow the attacker to replace files and gain access to sensitive server-side information.
Problem types: cwe_id: CWE-424
description: Improper Protection of Alternate Path
Affected products: vendor: Cisco
product: Cisco Identity Services Engine Software
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
baseScore: 6.7
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: LOW
Published: 2023-11-21T18:49:16.737Z
CVE-2023-20273 
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
Problem types: cwe_id: CWE-78
description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Cisco
product: Cisco IOS XE Software
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
baseScore: 7.2
baseSeverity: HIGH
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-10-24T14:13:36.311Z
CVE-2023-20274 
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device.
 This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An attacker could exploit this vulnerability by modifying objects in the PHP Agent install directory, which would run with the same privileges as PHP. A successful exploit could allow a lower-privileged attacker to elevate their privileges to root on an affected device.
Problem types: cwe_id: CWE-269
description: Improper Privilege Management
Affected products: vendor: Cisco
product: Cisco AppDynamics
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
baseScore: 6.3
baseSeverity: MEDIUM
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: LOW
Published: 2023-11-21T18:49:52.044Z
CVE-2023-20275 
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.
Problem types: cwe_id: CWE-346
description: Origin Validation Error
Affected products: vendor: Cisco
product: Cisco Adaptive Security Appliance (ASA) Software
vendor: Cisco
product: Cisco Firepower Threat Defense Software
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
baseScore: 4.1
baseSeverity: MEDIUM
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
Published: 2023-12-12T18:06:17.467Z
CVE-2023-20507 
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Published: 2025-02-11T21:02:54.581Z
CVE-2023-20509 
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
Affected products: vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Cards
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L
version: 3.1
Published: 2024-08-13T16:52:00.677Z
CVE-2023-20510 
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.
Affected products: vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
version: 3.1
Published: 2024-08-13T16:52:11.777Z
CVE-2023-20512 
A hardcoded AES   key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.
Affected products: vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 1.9
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-08-13T16:52:33.888Z
CVE-2023-20513 
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially resulting in a denial of service.
Affected products: vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-08-13T16:52:35.499Z
CVE-2023-20514 
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
Problem types: cwe_id: CWE-233
description: CWE-233  Improper Handling of Parameters
Affected products: vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W7000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO VII
default_status: affected
vendor: AMD
product: AMD Radeon™ VII
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
vendor: AMD
product: AMD Radeon™ PROV710
default_status: affected
Published: 2026-02-11T14:33:19.219Z
CVE-2023-20515 
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
Problem types: cwe_id: CWE-1284
description: CWE-1284 Improper Validation of Specified Quantity in Input
Affected products: vendor: AMD
product: AMD Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ 3000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Mobile Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Published: 2025-02-11T21:16:29.016Z
CVE-2023-20516 
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiality or integrity.
Problem types: cwe_id: CWE-274
description: CWE-274  Improper Handling of Insufficient Privileges
Affected products: vendor: AMD
product: AMD Instinct™ MI250
default_status: affected
vendor: AMD
product: AMD Instinct™ MI210
default_status: affected
vendor: AMD
product: AMD Radeon™ Instinct™ MI25 Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520 Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620 Graphics Products
default_status: affected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
Published: 2025-09-06T16:13:36.336Z
CVE-2023-20519 
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.













Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor:  AMD
product: 4th Gen AMD EPYC™ Processors 
default_status: unaffected
Published: 2023-11-14T18:53:36.329Z
CVE-2023-20520 
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.








Affected products: vendor: AMD
product: 1st Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:29.141Z
CVE-2023-20521 
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Affected products: vendor: AMD
product: Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 3000
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V1000
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
version: 3.1
Published: 2023-11-14T18:52:31.662Z
CVE-2023-20522 
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.

Problem types: description: n/a
Affected products: vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:58.039Z
CVE-2023-20523 
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.

Problem types: description: n/a
Affected products: vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:59.383Z