CVE-2020-12951: Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

PriorityP430high7CVSS 3.1

AVLACHPRLUINSUCHIHAH

EPSS

0.21%

11.1th percentile

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Affected

60 ranges· showing 25

Vendor	Product	Version range	Fixed in
amd	athlon_series	—	—
amd	epyc_7001_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7002_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7003_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7232p_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7251_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7252_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7262_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7272_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7281_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7282_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_72f3_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7301_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7302_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7302p_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7313_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7313p_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7343_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7351_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7351p_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7352_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_73f3_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7401_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7401p_firmware	< naplespi-sp3_1.0.0.g	naplespi-sp3_1.0.0.g
amd	epyc_7402_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.