Improper input validation in Amd 2nd Gen Epyc™

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.000 (15.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References