CVE-2020-12890

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.

CVSS v3 6.7 MEDIUM
CVSS v2.0 7.2 HIGH

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://www.amd.com/en/corporate/product-security	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:amd:amd_generic_encapsulated_software_architecture:-:*:*:*:*:*:*:*

History

15 Dec 2021, 20:01

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 7.2 v3 : 6.7
References	~~(MISC) https://www.amd.com/en/corporate/product-security -~~	(MISC) https://www.amd.com/en/corporate/product-security - Vendor Advisory
CPE		cpe:2.3:o:amd:amd_generic_encapsulated_software_architecture:-:::::::*

10 Dec 2021, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-12-10 22:15

Updated : 2023-12-10 14:09

NVD link : CVE-2020-12890

Mitre link : CVE-2020-12890

CVE.ORG link : CVE-2020-12890

JSON object : View

Products Affected

amd

amd_generic_encapsulated_software_architecture

CWE

NVD-CWE-noinfo

{"id": "CVE-2020-12890", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2021-12-10T22:15:07.833", "references": [{"url": "https://www.amd.com/en/corporate/product-security", "tags": ["Vendor Advisory"], "source": "psirt@amd.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system."}, {"lang": "es", "value": "Un manejo inapropiado de los punteros en el c\u00f3digo de manejo de System Management Mode (SMM) puede permitir a un atacante privilegiado con acceso f\u00edsico o administrativo manipular potencialmente la arquitectura de software encapsulado gen\u00e9rico de AMD (AGESA) para ejecutar c\u00f3digo arbitrario sin ser detectado por el sistema operativo"}], "lastModified": "2021-12-15T20:01:13.343", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:amd_generic_encapsulated_software_architecture:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "250322FF-6899-4E91-9A89-D6A3B693EED4"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@amd.com"}