NetSight
high7.1

CVE-2020-12946

Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.

Impact

Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.

Affected products

VendorProductAffected versions
AmdEpyc 7f72 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7f52 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7f32 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7h12 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7742 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7702 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7702p Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7662 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7642 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7552 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7542 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7532 Firmware
before romepi-sp3_1.0.0.c

Weakness classification

References