CVE-2020-12946

HIGH

AMD EPYC Firmware - Denial of Service via Discrete TPM Command Input Validation

Title source: llm

Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 7.1

EPSS 0.0013

EPSS Percentile 31.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-20

Status published

Products (44)

amd/epyc_7232p_firmware < romepi-sp3_1.0.0.c

amd/epyc_7252_firmware < romepi-sp3_1.0.0.c

amd/epyc_7262_firmware < romepi-sp3_1.0.0.c

amd/epyc_7272_firmware < romepi-sp3_1.0.0.c

amd/epyc_7282_firmware < romepi-sp3_1.0.0.c

amd/epyc_72f3_firmware < milanpi-sp3_1.0.0.4

amd/epyc_7302_firmware < romepi-sp3_1.0.0.c

amd/epyc_7302p_firmware < romepi-sp3_1.0.0.c

amd/epyc_7313_firmware < milanpi-sp3_1.0.0.4

amd/epyc_7313p_firmware < milanpi-sp3_1.0.0.4

... and 34 more

Published Nov 16, 2021

Tracked Since Feb 18, 2026