NetSight
high7.8

CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

Impact

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

Affected products

VendorProductAffected versions
AmdEpyc 7601 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7501 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7451 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7401 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7371 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7301 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7281 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7261 Firmware
before naplespi-sp3_1.0.0.g

Weakness classification

References