Vulnerability Description
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
CVSS Score
5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7003 | - |
| Amd | Epyc 7002 Firmware | < romepi-sp3_1.0.0.c |
| Amd | Epyc 7002 | - |
| Amd | Epyc 7001 Firmware | < naplespi-sp3_1.0.0.g |
| Amd | Epyc 7001 | - |
| Amd | Epyc 72F3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 72F3 | - |
| Amd | Epyc 7313 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313 | - |
| Amd | Epyc 7313P Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313P | - |
| Amd | Epyc 7343 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7343 | - |
| Amd | Epyc 73F3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 73F3 | - |
| Amd | Epyc 7413 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7413 | - |
| Amd | Epyc 7443 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443 | - |
Related Weaknesses (CWE)
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021Vendor Advisory
FAQ
What is CVE-2020-12954?
CVE-2020-12954 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
How severe is CVE-2020-12954?
CVE-2020-12954 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-12954?
Check the references section above for vendor advisories and patch information. Affected products include: Amd Epyc 7003 Firmware, Amd Epyc 7003, Amd Epyc 7002 Firmware, Amd Epyc 7002, Amd Epyc 7001 Firmware.