Vulnerability Description
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7003 | - |
| Amd | Epyc 7002 Firmware | < romepi-sp3_1.0.0.c |
| Amd | Epyc 7002 | - |
| Amd | Epyc 72F3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 72F3 | - |
| Amd | Epyc 7313 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313 | - |
| Amd | Epyc 7313P Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313P | - |
| Amd | Epyc 7343 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7343 | - |
| Amd | Epyc 73F3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 73F3 | - |
| Amd | Epyc 7413 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7413 | - |
| Amd | Epyc 7443 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443 | - |
| Amd | Epyc 7443P Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443P | - |
Related Weaknesses (CWE)
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021Vendor Advisory
FAQ
What is CVE-2020-12961?
CVE-2020-12961 is a vulnerability with a CVSS score of 7.8 (HIGH). A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI RO...
How severe is CVE-2020-12961?
CVE-2020-12961 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-12961?
Check the references section above for vendor advisories and patch information. Affected products include: Amd Epyc 7003 Firmware, Amd Epyc 7003, Amd Epyc 7002 Firmware, Amd Epyc 7002, Amd Epyc 72F3 Firmware.