CVE-2020-12930

Description

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.

7.8

CVSS

Severity: High

CVSS 3.1 •

EPSS 0.06%

Vendor Advisory amd.com

Affected: AMD AMD Radeon RX 5000 Series & PRO W5000 Series

Affected: AMD AMD Ryzen(TM) Embedded R1000

Affected: AMD AMD Ryzen(TM) Embedded R2000

Affected: AMD AMD Ryzen(TM) Embedded 5000

Affected: AMD AMD Ryzen(TM) Embedded V1000

Affected: AMD AMD Ryzen(TM) Embedded V2000

References

Link	Tags
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029	vendor advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001

Frequently Asked Questions

What is the severity of CVE-2020-12930?: CVE-2020-12930 has been scored as a high severity vulnerability.
How to fix CVE-2020-12930?: To fix CVE-2020-12930, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2020-12930 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2020-12930 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2020-12930?: CVE-2020-12930 affects AMD AMD Radeon RX 5000 Series & PRO W5000 Series, AMD AMD Ryzen(TM) Embedded R1000, AMD AMD Ryzen(TM) Embedded R2000, AMD AMD Ryzen(TM) Embedded 5000, AMD AMD Ryzen(TM) Embedded V1000, AMD AMD Ryzen(TM) Embedded V2000.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.