Detections
Analytics
CVE-2023-20518
low
Description
Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality.
References
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html