CVE-2020-12954

State: Published
Severity: Not scored
Published: Nov 16, 2021
Updated: Sep 16, 2024
Reserved: May 15, 2020

Description

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

Scores

The record has no CVSS score.

Weaknesses

CWE-693 Protection Mechanism Failure

Affected Products

Product	Versions
1st Gen AMD EPYC™AMD	before NaplesPI-SP3_1.0.0.GAffected
2nd Gen AMD EPYC™AMD	before RomePI-SP3_1.0.0.CAffected
3rd Gen AMD EPYC™AMD	before MilanPI-SP3_1.0.0.4Affected

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.