CVE-2020-12944

🗓️ 16 Nov 2021 18:17:24Reported by AMDType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 57 Views

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution

Reporter	Title	Published	Views	Family All 10
Amd	AMD Server Vulnerabilities – November 2021	8 Nov 202100:00	–	amd
Amd	AMD Client Vulnerabilities – May 2022	10 May 202200:00	–	amd
CNNVD	AMD Secure Processor输入验证错误漏洞	12 Nov 202100:00	–	cnnvd
Cvelist	CVE-2020-12944	16 Nov 202118:17	–	cvelist
EUVD	EUVD-2020-5224	7 Oct 202500:30	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware May 2022 Security Updates	10 May 202200:00	–	hp
NVD	CVE-2020-12944	16 Nov 202119:15	–	nvd
Prion	Input validation	16 Nov 202119:15	–	prion
Positive Technologies	PT-2021-9509 · Unknown · Scp-Firmware +1	16 Nov 202100:00	–	ptsecurity
SUSE CVE	SUSE CVE-2020-12944	15 Feb 202303:58	–	susecve

NVD

Node

amd epyc_7601_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7601Match-

Node

amd epyc_7551p_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7551pMatch-

Node

amd epyc_7551_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7551Match-

Node

amd epyc_7501_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7501Match-

Node

amd epyc_7451_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7451Match-

Node

amd epyc_7401_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7401Match-

Node

amd epyc_7371_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7371Match-

Node

amd epyc_7351p_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7351pMatch-

Node

amd epyc_7351_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7351Match-

Node

amd epyc_7301_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7301Match-

Node

amd epyc_7281_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7281Match-

Node

amd epyc_7261_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7261Match-

Node

amd epyc_7251_firmwareRange<naplespi-sp3_1.0.0.g

AND

amd epyc_7251Match-

Node

amd epyc_7f72_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7f72Match-

Node

amd epyc_7f52_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7f52Match-

Node

amd epyc_7f32_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7f32Match-

Node

amd epyc_7h12_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7h12Match-

Node

amd epyc_7742_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7742Match-

Node

amd epyc_7702_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7702Match-

Node

amd epyc_7702p_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7702pMatch-

Node

amd epyc_7662_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7662Match-

Node

amd epyc_7642_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7642Match-

Node

amd epyc_7552_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7552Match-

Node

amd epyc_7542_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7542Match-

Node

amd epyc_7532_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7532Match-

Node

amd epyc_7502_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7502Match-

Node

amd epyc_7502p_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7502pMatch-

Node

amd epyc_7452_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7452Match-

Node

amd epyc_7402_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7402Match-

Node

amd epyc_7402p_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7402pMatch-

Node

amd epyc_7352_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7352Match-

Node

amd epyc_7302_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7302Match-

Node

amd epyc_7302p_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7302pMatch-

Node

amd epyc_7282_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7282Match-

Node

amd epyc_7272_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7272Match-

Node

amd epyc_7262_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7262Match-

Node

amd epyc_7252_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7252Match-

Node

amd epyc_7232p_firmwareRange<romepi-sp3_1.0.0.c

AND

amd epyc_7232pMatch-

Node

amd epyc_7763_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7763Match-

Node

amd epyc_7713p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7713pMatch-

Node

amd epyc_7713_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7713Match-

Node

amd epyc_7663_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7663Match-

Node

amd epyc_7643_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7643Match-

Node

amd epyc_75f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_75f3Match-

Node

amd epyc_7543p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7543pMatch-

Node

amd epyc_7543_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7543Match-

Node

amd epyc_7513_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7513Match-

Node

amd epyc_7453_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7453Match-

Node

amd epyc_74f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_74f3Match-

Node

amd epyc_7443p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7443pMatch-

Node

amd epyc_7443_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7443Match-

Node

amd epyc_7413_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7413Match-

Node

amd epyc_73f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_73f3Match-

Node

amd epyc_7343_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7343Match-

Node

amd epyc_7313p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7313pMatch-

Node

amd epyc_7313_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7313Match-

Node

amd epyc_72f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_72f3Match-

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

21 Nov 2024 05:00Current

8High risk

Vulners AI Score8

CVSS 24.6

CVSS 3.17.8

EPSS0.00132

CWE-20