First published: Tue Nov 16 2021(Updated: )
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
Credit: psirt@amd.com
Affected Software | Affected Version | How to fix |
---|---|---|
AMD EPYC 7003 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7003 Firmware | ||
AMD EPYC 7002 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC Server | ||
Amd Epyc Server Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7001 Firmware | ||
AMD EPYC 72F3 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 72F3 Firmware | ||
AMD EPYC Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7313 Firmware | ||
AMD EPYC 7313P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7313P Firmware | ||
Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7343 Firmware | ||
AMD EPYC 73F3 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 73F3 Firmware | ||
AMD EPYC 7413 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7413 Firmware | ||
AMD EPYC 7443P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7443P | ||
AMD EPYC 7443P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7443P Firmware | ||
Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC Server | ||
AMD EPYC 74F3 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 74F3 Firmware | ||
AMD EPYC 7513 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7513 Firmware | ||
Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7543 Firmware | ||
AMD EPYC 7543P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7543P Firmware | ||
AMD EPYC 75F3 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 75F3 Firmware | ||
AMD EPYC 7643P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7643 Firmware | ||
AMD EPYC 7663 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7663 Firmware | ||
AMD EPYC 7713P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7713 Firmware | ||
AMD EPYC 7713P Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7713P Firmware | ||
AMD EPYC 7763 Firmware | <milanpi-sp3_1.0.0.4 | |
AMD EPYC 7763 Firmware | ||
AMD EPYC 7232p firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7232p firmware | ||
AMD EPYC 7252 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7252 Firmware | ||
AMD EPYC 7262 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7262 Firmware | ||
AMD EPYC 7272 firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7272 firmware | ||
AMD EPYC 7282 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7282 Firmware | ||
Amd Epyc Server Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7302 Firmware | ||
AMD EPYC 7302P Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7302P Firmware | ||
AMD EPYC Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7352 firmware | ||
Amd Epyc Server Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7402 Firmware | ||
AMD EPYC 7402P Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7402P Firmware | ||
AMD EPYC 7452 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC Server | ||
AMD EPYC 7502 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7502 firmware | ||
AMD EPYC 7502P Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7502P Firmware | ||
AMD EPYC 7532 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7532 Firmware | ||
AMD EPYC 7542 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC Server | ||
AMD EPYC 7552 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7552 Firmware | ||
AMD EPYC 7642 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7642 Firmware | ||
AMD EPYC 7662 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7662 Firmware | ||
AMD EPYC 7702p firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC Server | ||
AMD EPYC 7702 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7702P | ||
AMD EPYC 7742 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC Server | ||
AMD EPYC 7F32 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7F32 Firmware | ||
AMD EPYC 7F52 Firmware | <romepi-sp3_1.0.0.c | |
AMD EPYC 7F52 Firmware | ||
AMD EPYC 7F72 | <romepi-sp3_1.0.0.c | |
AMD EPYC 7F72 Firmware | ||
AMD EPYC 7251 Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7251 Firmware | ||
Amd Epyc Server Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC Server | ||
Amd Epyc Server Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7301 Firmware | ||
AMD EPYC 7351P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7351 Firmware | ||
AMD EPYC 7351P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7351P Firmware | ||
AMD EPYC 7401P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7401 Firmware | ||
AMD EPYC 7401P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7401P Firmware | ||
AMD EPYC 7451 Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7451 Firmware | ||
AMD EPYC 7501 Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC Server | ||
AMD EPYC 7551P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7551 Firmware | ||
AMD EPYC 7551P Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7551P Firmware | ||
AMD EPYC 7601 Firmware | <naplespi-sp3_1.0.0.g | |
AMD EPYC 7601 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-12951 is rated as critical due to the potential for less privileged x86 code to perform unauthorized System Management Mode operations.
To fix CVE-2020-12951, update the AMD EPYC firmware to the latest version beyond milanpi-sp3_1.0.0.4.
CVE-2020-12951 affects AMD EPYC 7003, 7002, and 7001 firmware versions that are prior to their respective fixed versions.
If CVE-2020-12951 is exploited, it could allow attackers to execute malicious code in System Management Mode, which can compromise system integrity.
Not all AMD EPYC processors are vulnerable to CVE-2020-12951; only those running the affected firmware versions are at risk.