CVE-2020-12966

Medium

Description

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Epyc 7763 Firmware
PublishedFeb 4, 2022
First seenFeb 4, 2022

How to fix

Update
  • amd epyc_7763_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7713p_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7713_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7663_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7643_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_75f3_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7543p_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7543_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7513_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_74f3_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7453_firmwaremilanpi-sp3_1.0.0.5 or later
  • amd epyc_7443p_firmwaremilanpi-sp3_1.0.0.5 or later

Affected products

ProductAffected versionsFixed in
amd epyc_7763_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7713p_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7713_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7663_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7643_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_75f3_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7543p_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7543_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7513_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_74f3_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7453_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7443p_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7443_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7413_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_73f3_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7343_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7313p_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7313_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_72f3_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7003_firmwarev < milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amd epyc_7001_firmwareNo range specified—
amd epyc_7002_firmwareNo range specified—
amd epyc_7232p_firmwareNo range specified—
amd epyc_7251_firmwareNo range specified—
amd epyc_7252_firmwareNo range specified—
amd epyc_7261_firmwareNo range specified—
amd epyc_7262_firmwareNo range specified—
amd epyc_7272_firmwareNo range specified—
amd epyc_7281_firmwareNo range specified—
amd epyc_7282_firmwareNo range specified—
amd epyc_7301_firmwareNo range specified—
amd epyc_7302_firmwareNo range specified—
amd epyc_7302p_firmwareNo range specified—
amd epyc_7351_firmwareNo range specified—
amd epyc_7351p_firmwareNo range specified—
amd epyc_7352_firmwareNo range specified—
amd epyc_7371_firmwareNo range specified—
amd epyc_7401_firmwareNo range specified—
amd epyc_7401p_firmwareNo range specified—
amd epyc_7402_firmwareNo range specified—
amd epyc_7402p_firmwareNo range specified—
amd epyc_7451_firmwareNo range specified—
amd epyc_7452_firmwareNo range specified—
amd epyc_7501_firmwareNo range specified—
amd epyc_7502_firmwareNo range specified—
amd epyc_7502p_firmwareNo range specified—
amd epyc_7532_firmwareNo range specified—
amd epyc_7542_firmwareNo range specified—
amd epyc_7551_firmwareNo range specified—
amd epyc_7551p_firmwareNo range specified—
amd epyc_7552_firmwareNo range specified—
amd epyc_7601_firmwareNo range specified—
amd epyc_7642_firmwareNo range specified—
amd epyc_7662_firmwareNo range specified—
amd epyc_7702_firmwareNo range specified—
amd epyc_7702p_firmwareNo range specified—
amd epyc_7742_firmwareNo range specified—
amd epyc_7f32_firmwareNo range specified—
amd epyc_7f52_firmwareNo range specified—
amd epyc_7f72_firmwareNo range specified—
amd epyc_7h12_firmwareNo range specified—
amd epyc_embedded_3101_firmwareNo range specified—
amd epyc_embedded_3151_firmwareNo range specified—
amd epyc_embedded_3201_firmwareNo range specified—
amd epyc_embedded_3251_firmwareNo range specified—
amd epyc_embedded_3255_firmwareNo range specified—
amd epyc_embedded_3351_firmwareNo range specified—
amd epyc_embedded_3451_firmwareNo range specified—
amd epyc_embedded_7232p_firmwareNo range specified—
amd epyc_embedded_7251_firmwareNo range specified—
amd epyc_embedded_7252_firmwareNo range specified—
amd epyc_embedded_7261_firmwareNo range specified—
amd epyc_embedded_7262_firmwareNo range specified—
amd epyc_embedded_7272_firmwareNo range specified—
amd epyc_embedded_7281_firmwareNo range specified—
amd epyc_embedded_7282_firmwareNo range specified—
amd epyc_embedded_7301_firmwareNo range specified—
amd epyc_embedded_7302_firmwareNo range specified—
amd epyc_embedded_7302p_firmwareNo range specified—
amd epyc_embedded_7351_firmwareNo range specified—
amd epyc_embedded_7352_firmwareNo range specified—
amd epyc_embedded_735p_firmwareNo range specified—
amd epyc_embedded_7371_firmwareNo range specified—
amd epyc_embedded_7401_firmwareNo range specified—
amd epyc_embedded_7402_firmwareNo range specified—
amd epyc_embedded_7402p_firmwareNo range specified—
amd epyc_embedded_740p_firmwareNo range specified—
amd epyc_embedded_7451_firmwareNo range specified—
amd epyc_embedded_7452_firmwareNo range specified—
amd epyc_embedded_7501_firmwareNo range specified—
amd epyc_embedded_7502_firmwareNo range specified—
amd epyc_embedded_7502p_firmwareNo range specified—
amd epyc_embedded_7532_firmwareNo range specified—
amd epyc_embedded_7542_firmwareNo range specified—
amd epyc_embedded_7551_firmwareNo range specified—
amd epyc_embedded_7552_firmwareNo range specified—
amd epyc_embedded_755p_firmwareNo range specified—
amd epyc_embedded_7601_firmwareNo range specified—
amd epyc_embedded_7642_firmwareNo range specified—
amd epyc_embedded_7662_firmwareNo range specified—
amd epyc_embedded_7702_firmwareNo range specified—
amd epyc_embedded_7702p_firmwareNo range specified—
amd epyc_embedded_7742_firmwareNo range specified—
amd epyc_embedded_7f32_firmwareNo range specified—
amd epyc_embedded_7f52_firmwareNo range specified—
amd epyc_embedded_7f72_firmwareNo range specified—
amd epyc_embedded_7h12_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.