CVE-2020-12961

published 2021-11-16

CVE-2020-12961: A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.

Affected

47 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	2nd_gen_amd_epyc	>= unspecified < RomePI-SP3_1.0.0.C	RomePI-SP3_1.0.0.C
amd	3rd_gen_amd_epyc	>= unspecified < MilanPI-SP3_1.0.0.4	MilanPI-SP3_1.0.0.4
amd	epyc_7002_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7003_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7232p_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7252_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7262_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7272_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7282_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_72f3_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7302_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7302p_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7313_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7313p_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7343_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7352_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_73f3_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7402_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7402p_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7413_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7443_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7443p_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_7452_firmware	< romepi-sp3_1.0.0.c	romepi-sp3_1.0.0.c
amd	epyc_7453_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4
amd	epyc_74f3_firmware	< milanpi-sp3_1.0.0.4	milanpi-sp3_1.0.0.4

CWE-20