cbcvebase.
CVE-2020-12954
published 2021-11-16

CVE-2020-12954: A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

medium5.5CVSS 3.1
AVLACLPRLUINSUCNIHAN
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

Affected

61 ranges· showing 25
VendorProductVersion rangeFixed in
amd1st_gen_amd_epyc>= unspecified < NaplesPI-SP3_1.0.0.GNaplesPI-SP3_1.0.0.G
amd2nd_gen_amd_epyc>= unspecified < RomePI-SP3_1.0.0.CRomePI-SP3_1.0.0.C
amd3rd_gen_amd_epyc>= unspecified < MilanPI-SP3_1.0.0.4MilanPI-SP3_1.0.0.4
amdepyc_7001_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7002_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7003_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7232p_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7251_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7252_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7262_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7272_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7281_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7282_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_72f3_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7301_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7302_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7302p_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_7313_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7313p_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7343_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7351_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7351p_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amdepyc_7352_firmware< romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amdepyc_73f3_firmware< milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amdepyc_7401_firmware< naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g