TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dell Poweredge Dsa2023355 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Nov 14, 2023 |
| Suse | — | Upgrade kernel-firmware-bluetoothUpgrade kernel-firmware-brcmUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-serialUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-qlogicUpgrade kernel-firmwareUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-ath11kUpgrade kernel-firmware-mediaUpgrade kernel-firmware-marvellUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-radeonUpgrade kernel-firmware-presteraUpgrade kernel-firmware-networkUpgrade kernel-firmware-tiUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-soundUpgrade kernel-firmware-allUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-atherosUpgrade kernel-firmware-platformUpgrade ucode-amdUpgrade kernel-firmware-qcomUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-intelUpgrade kernel-firmware-realtekUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-i915Upgrade kernel-firmware-amdgpuUpgrade kernel-firmware-nfpUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-bnx2 | Dec 7, 2023 | Nov 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub