CVE-2020-12966

· MEDIUMModified

← All CVEs

CVSS v3.1

5.5

EPSS

0.31%

Published

Feb 4, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

Affected Products (214)

amd · epyc_7763_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7763

amd · epyc_7713p_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7713p

amd · epyc_7713_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7713

amd · epyc_7663_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7663

amd · epyc_7643_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7643

amd · epyc_75f3_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_75f3

amd · epyc_7543p_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7543p

amd · epyc_7543_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7543

amd · epyc_7513_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7513

amd · epyc_74f3_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_74f3

amd · epyc_7453_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7453

amd · epyc_7443p_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7443p

amd · epyc_7443_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7443

amd · epyc_7413_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7413

amd · epyc_73f3_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_73f3

amd · epyc_7343_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7343

amd · epyc_7313p_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7313p

amd · epyc_7313_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7313

amd · epyc_72f3_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_72f3

amd · epyc_7003_firmware (up to milanpi-sp3_1.0.0.5)vulnerable

amd · epyc_7003

amd · epyc_7001_firmwarevulnerable

amd · epyc_7001

amd · epyc_7002_firmwarevulnerable

amd · epyc_7002

amd · epyc_7232p_firmwarevulnerable

amd · epyc_7232p

amd · epyc_7251_firmwarevulnerable

amd · epyc_7251

amd · epyc_7252_firmwarevulnerable

amd · epyc_7252

...and 164 more

References (4)

http://www.openwall.com/lists/oss-security/2022/08/08/6

Mailing ListThird Party Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1013

MitigationVendor Advisory

http://www.openwall.com/lists/oss-security/2022/08/08/6

Mailing ListThird Party Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1013

MitigationVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs