CVE-2023-20540

Vulnerability Description

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.

Related Weaknesses (CWE)

CWE-208

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4012.html

FAQ

What is CVE-2023-20540?

CVE-2023-20540 is a documented vulnerability. An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentiall...

How severe is CVE-2023-20540?

CVSS scoring is not yet available for CVE-2023-20540. Check NVD for updates.

Is there a patch for CVE-2023-20540?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.