CVE-2023-20521

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading…

Low · published November 14, 2023

CVSS v3.1
3.3
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Published
2023-11-14T18:52Z
EPSS history
Timeline
  • 14 NOV 18:52Z
    TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading…
    cvelistv5