PT-2020-13325 · Amd · Amd Vbios Flash Tool Sdk

H0Mbre Pwner · Published 2020-11-12 · Updated 2020-11-30 · CVE-2020-12927

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMD VBIOS Flash Tool SDK (affected versions not specified)

Description A potential issue in a dynamically loaded AMD driver in the AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2020-12927

Affected Products

Amd Vbios Flash Tool Sdk

References · 4

• https://amd.com/en/corporate/product-security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12927 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12927 · Security Note
• https://t.me/cvenotify/6346 · Telegram Post