CVE Feed

    Dashboard / CVE / CVE-2020-12967

    CVE-2020-12967

    The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

    Published:May 13, 2021
    Last Modified:Nov 21, 2024
    EPS:May 13, 2021
    EPSS Score:0.01611
    CVSS Score:7.2

    Affected Products

    Vendor
    Amd
    Product
    Epyc 7232p
    Vendor
    Amd
    Product
    Epyc 7251
    Vendor
    Amd
    Product
    Epyc 7252
    Vendor
    Amd
    Product
    Epyc 7261
    Vendor
    Amd
    Product
    Epyc 7262
    Vendor
    Amd
    Product
    Epyc 7272
    Vendor
    Amd
    Product
    Epyc 7281
    Vendor
    Amd
    Product
    Epyc 7282
    Vendor
    Amd
    Product
    Epyc 72f3
    Vendor
    Amd
    Product
    Epyc 7301
    Vendor
    Amd
    Product
    Epyc 7302
    Vendor
    Amd
    Product
    Epyc 7302p
    Vendor
    Amd
    Product
    Epyc 7313
    Vendor
    Amd
    Product
    Epyc 7313p
    Vendor
    Amd
    Product
    Epyc 7343
    Vendor
    Amd
    Product
    Epyc 7351
    Vendor
    Amd
    Product
    Epyc 7351p
    Vendor
    Amd
    Product
    Epyc 7352
    Vendor
    Amd
    Product
    Epyc 7371
    Vendor
    Amd
    Product
    Epyc 73f3
    Vendor
    Amd
    Product
    Epyc 7401
    Vendor
    Amd
    Product
    Epyc 7401p
    Vendor
    Amd
    Product
    Epyc 7402
    Vendor
    Amd
    Product
    Epyc 7402p
    Vendor
    Amd
    Product
    Epyc 7413
    Vendor
    Amd
    Product
    Epyc 7443
    Vendor
    Amd
    Product
    Epyc 7443p
    Vendor
    Amd
    Product
    Epyc 7451
    Vendor
    Amd
    Product
    Epyc 7452
    Vendor
    Amd
    Product
    Epyc 7453
    Vendor
    Amd
    Product
    Epyc 74f3
    Vendor
    Amd
    Product
    Epyc 7501
    Vendor
    Amd
    Product
    Epyc 7502
    Vendor
    Amd
    Product
    Epyc 7502p
    Vendor
    Amd
    Product
    Epyc 7513
    Vendor
    Amd
    Product
    Epyc 7532
    Vendor
    Amd
    Product
    Epyc 7542
    Vendor
    Amd
    Product
    Epyc 7543
    Vendor
    Amd
    Product
    Epyc 7543p
    Vendor
    Amd
    Product
    Epyc 7551
    Vendor
    Amd
    Product
    Epyc 7551p
    Vendor
    Amd
    Product
    Epyc 7552
    Vendor
    Amd
    Product
    Epyc 75f3
    Vendor
    Amd
    Product
    Epyc 7601
    Vendor
    Amd
    Product
    Epyc 7642
    Vendor
    Amd
    Product
    Epyc 7643
    Vendor
    Amd
    Product
    Epyc 7662
    Vendor
    Amd
    Product
    Epyc 7663
    Vendor
    Amd
    Product
    Epyc 7702
    Vendor
    Amd
    Product
    Epyc 7702p
    Vendor
    Amd
    Product
    Epyc 7713
    Vendor
    Amd
    Product
    Epyc 7713p
    Vendor
    Amd
    Product
    Epyc 7742
    Vendor
    Amd
    Product
    Epyc 7763
    Vendor
    Amd
    Product
    Epyc 7f32
    Vendor
    Amd
    Product
    Epyc 7f52
    Vendor
    Amd
    Product
    Epyc 7f72
    Vendor
    Amd
    Product
    Epyc 7h12
    Vendor
    Amd
    Product
    Epyc Embedded 3101
    Vendor
    Amd
    Product
    Epyc Embedded 3151
    Vendor
    Amd
    Product
    Epyc Embedded 3201
    Vendor
    Amd
    Product
    Epyc Embedded 3251
    Vendor
    Amd
    Product
    Epyc Embedded 3255
    Vendor
    Amd
    Product
    Epyc Embedded 3351
    Vendor
    Amd
    Product
    Epyc Embedded 3451

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-20578 (CVSS 7.5) — A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS…
    CVE-2021-26344 (CVSS 7.2) — An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker …
    CVE-2021-26345 (CVSS 1.9) — Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force a…
    CVE-2023-20533 (CVSS 6.1) — Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/…
    CVE-2023-20526 (CVSS 1.9) — Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to e…
    CVE-2023-20521 (CVSS 3.3) — TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after m…
    CVE-2021-46774 (CVSS 6.7) — Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/…
    CVE-2023-20592 (CVSS 6.5) — Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a maliciou…
    CVE-2023-20593 (CVSS 5.5) — An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentiall…
    CVE-2023-20575 (CVSS 6.5) — A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to us…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High