Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability management ShadowTrackr CVSS score

← Back to results

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

7.8

CVSS

6.4

ShadowTrackr

CISA KEV

NCSC.nl

CVSS v4.0 Metrics

Exploitability

Attack VectorLocal

ComplexityLow

RequirementsPresent

PrivilegesLow

User InteractionNone

Threat

Exploit MaturityPoC

Vulnerable System

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Subsequent System

ConfidentialityNone

IntegrityNone

AvailabilityNone

Supplemental

SafetyNegligible

AutomatableYes

RecoveryAutomatic

Value DensityConcentrated

UrgencyMedium

Patch StatusUnavailable

Change Log

Date	Source	Changes	Score
2026-07-21	PoC	E: U→P	4.4 → 6.4
2026-07-21	nvd	AV: P→L, AC: H→L, PR: H→L, UI: A→N, VC: N→H, VI: N→H, VA: N→H	0.0 → 4.4
2026-07-21	cve.org	initial, patch: Unavailable	0.0

References: CVE.org · NVD · PoC

Affected Software

Vendor	Product	Version
AMD	Athlon™ Series	various
amd	epyc_7232p_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7251_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7252_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7261_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7262_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7272_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7281_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7282_firmware	< romepi-sp3_1.0.0.c
amd	epyc_72f3_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7301_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7302_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7302p_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7313_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7313p_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7343_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7351_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7351p_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7352_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7371_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_73f3_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7401_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7402_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7402p_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7413_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7443_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7443p_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7451_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7452_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7453_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_74f3_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7501_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7502_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7502p_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7513_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7532_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7542_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7543_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7543p_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7551_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7551p_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7552_firmware	< romepi-sp3_1.0.0.c
amd	epyc_75f3_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7601_firmware	< naplespi-sp3_1.0.0.g
amd	epyc_7642_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7643_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7662_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7663_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7702_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7702p_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7713_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7713p_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7742_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7763_firmware	< milanpi-sp3_1.0.0.4
amd	epyc_7f32_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7f52_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7f72_firmware	< romepi-sp3_1.0.0.c
amd	epyc_7h12_firmware	< romepi-sp3_1.0.0.c
AMD	Ryzen™ Series	various

Published: 2021-11-16

Search the CVE vulnerability database

CVE-2020-12944