{"id":"CVE-2020-12961","state":"PUBLISHED","title":"A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead","description":"A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.","publishedAt":"2021-11-16T18:13:39.959Z","updatedAt":"2024-09-17T04:13:59.255Z","severity":null,"assigner":"AMD","products":["AMD 2nd Gen AMD EPYC™","AMD 3rd Gen AMD EPYC™"],"affected":[{"vendor":"AMD","product":"2nd Gen AMD EPYC™","versions":[{"version":"unspecified","status":"affected","lessThan":"RomePI-SP3_1.0.0.C","versionType":"custom"}]},{"vendor":"AMD","product":"3rd Gen AMD EPYC™","versions":[{"version":"unspecified","status":"affected","lessThan":"MilanPI-SP3_1.0.0.4","versionType":"custom"}]}],"references":["https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T19:46:27.697Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/12xxx/CVE-2020-12961.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-12961","state":"PUBLISHED","datePublished":"2021-11-16T18:13:39.959Z","dateUpdated":"2024-09-17T04:13:59.255Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2020-05-15T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections."}],"affected":[{"vendor":"AMD","product":"2nd Gen AMD EPYC™","versions":[{"version":"unspecified","status":"affected","lessThan":"RomePI-SP3_1.0.0.C","versionType":"custom"}]},{"vendor":"AMD","product":"3rd Gen AMD EPYC™","versions":[{"version":"unspecified","status":"affected","lessThan":"MilanPI-SP3_1.0.0.4","versionType":"custom"}]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"AMD","dateUpdated":"2021-11-16T18:13:39.000Z","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648"},"datePublic":"2021-11-09T00:00:00.000Z","source":{"advisory":"AMD-SB-1021","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@amd.com","DATE_PUBLIC":"2021-11-09T20:00:00.000Z","ID":"CVE-2020-12961","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"2nd Gen AMD EPYC™","version":{"version_data":[{"version_affected":"<","version_value":"RomePI-SP3_1.0.0.C"}]}},{"product_name":"3rd Gen AMD EPYC™","version":{"version_data":[{"version_affected":"<","version_value":"MilanPI-SP3_1.0.0.4"}]}}]},"vendor_name":"AMD"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections."}]},"generator":{"engine":"Vulnogram 0.0.9"},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-20 Improper Input Validation"}]}]},"references":{"reference_data":[{"name":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021","refsource":"MISC","url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021"}]},"source":{"advisory":"AMD-SB-1021","discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T12:11:19.051Z"}}]}}}