Feed/CVE-2023-20521
CVE-2023-20521LOWCVSS 3.3

CVE-2023-20521

Published Nov 14, 2023·Updated Jun 17, 2026

NVD Description

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.

CVSS Vector

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free