Improper input validation in Amd 2nd Gen Epyc™
CVE-2020-12961
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.000 (15.7th percentile) — read the EPSS interpretation.
Affected products
- Amd 2nd Gen Epyc™ — versions unspecified
- Amd 3rd Gen Epyc™ — versions unspecified
Weakness classification (CWE)
References
- www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021 (x_refsource_MISC)