7

CVE-2020-12951

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AmdEpyc 7003 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7003 Version-
AmdEpyc 7002 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7002 Version-
AmdEpyc 7001 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7001 Version-
AmdEpyc 72f3 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 72f3 Version-
AmdEpyc 7313 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7313 Version-
AmdEpyc 7313p Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7313p Version-
AmdEpyc 7343 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7343 Version-
AmdEpyc 73f3 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 73f3 Version-
AmdEpyc 7413 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7413 Version-
AmdEpyc 7443 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7443 Version-
AmdEpyc 7443p Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7443p Version-
AmdEpyc 7453 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7453 Version-
AmdEpyc 74f3 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 74f3 Version-
AmdEpyc 7513 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7513 Version-
AmdEpyc 7543 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7543 Version-
AmdEpyc 7543p Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7543p Version-
AmdEpyc 75f3 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 75f3 Version-
AmdEpyc 7643 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7643 Version-
AmdEpyc 7663 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7663 Version-
AmdEpyc 7713 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7713 Version-
AmdEpyc 7713p Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7713p Version-
AmdEpyc 7763 Firmware Version < milanpi-sp3_1.0.0.4
   AmdEpyc 7763 Version-
AmdEpyc 7232p Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7232p Version-
AmdEpyc 7252 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7252 Version-
AmdEpyc 7262 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7262 Version-
AmdEpyc 7272 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7272 Version-
AmdEpyc 7282 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7282 Version-
AmdEpyc 7302 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7302 Version-
AmdEpyc 7302p Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7302p Version-
AmdEpyc 7352 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7352 Version-
AmdEpyc 7402 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7402 Version-
AmdEpyc 7402p Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7402p Version-
AmdEpyc 7452 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7452 Version-
AmdEpyc 7502 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7502 Version-
AmdEpyc 7502p Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7502p Version-
AmdEpyc 7532 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7532 Version-
AmdEpyc 7542 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7542 Version-
AmdEpyc 7552 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7552 Version-
AmdEpyc 7642 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7642 Version-
AmdEpyc 7662 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7662 Version-
AmdEpyc 7702 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7702 Version-
AmdEpyc 7702p Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7702p Version-
AmdEpyc 7742 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7742 Version-
AmdEpyc 7f32 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7f32 Version-
AmdEpyc 7f52 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7f52 Version-
AmdEpyc 7f72 Firmware Version < romepi-sp3_1.0.0.c
   AmdEpyc 7f72 Version-
AmdEpyc 7251 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7251 Version-
AmdEpyc 7281 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7281 Version-
AmdEpyc 7301 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7301 Version-
AmdEpyc 7351 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7351 Version-
AmdEpyc 7351p Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7351p Version-
AmdEpyc 7401 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7401 Version-
AmdEpyc 7401p Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7401p Version-
AmdEpyc 7451 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7451 Version-
AmdEpyc 7501 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7501 Version-
AmdEpyc 7551 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7551 Version-
AmdEpyc 7551p Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7551p Version-
AmdEpyc 7601 Firmware Version < naplespi-sp3_1.0.0.g
   AmdEpyc 7601 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.292
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.