VULNERABILITY INTELLIGENCE
CVE-2020-12961
CVSS score7.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2021-11-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
Weakness classification
- psirt@amd.com: CWE-20
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@amd.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory