NetSight
high7.8

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management N…

Impact

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7002 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 72f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7343 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 73f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7413 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.4

Weakness classification

References