medium5.5
CVE-2020-12954
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
Impact
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7002 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7001 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 72f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7343 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 73f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7413 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.4 |