CVE-2020-14032
CRITICALASRock 4x4 BOX-R1000 Firmware < 1.40 - Privilege Escalation via SMM Code Execution
Title source: llmDescription
ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.asrock.com/support/index.us.asp?cat=BIOS
Exploit, Third Party Advisory x_refsource_misc
https://dannyodler.medium.com/attacking-the-golden-ring-on-amd-mini-pc-b7bfb217b437
Scores
CVSS v3
9.8
EPSS
0.0211
EPSS Percentile
79.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
Status
published
Products (1)
asrock/box-r1000_firmware
< 1.40
Published
Jul 23, 2021
Tracked Since
Feb 18, 2026