CVE-2020-12966: AMD Epyc 7001 Firmware

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

Affected products

  • AMD Epyc 7001 Firmware: affected versions not specified
  • AMD Epyc 7002 Firmware: affected versions not specified
  • AMD Epyc 7003 Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7232p Firmware: affected versions not specified
  • AMD Epyc 7251 Firmware: affected versions not specified
  • AMD Epyc 7252 Firmware: affected versions not specified
  • AMD Epyc 7261 Firmware: affected versions not specified
  • AMD Epyc 7262 Firmware: affected versions not specified
  • AMD Epyc 7272 Firmware: affected versions not specified
  • AMD Epyc 7281 Firmware: affected versions not specified
  • AMD Epyc 7282 Firmware: affected versions not specified
  • AMD Epyc 72f3 Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7301 Firmware: affected versions not specified
  • AMD Epyc 7302 Firmware: affected versions not specified
  • AMD Epyc 7302p Firmware: affected versions not specified
  • AMD Epyc 7313 Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7313p Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7343 Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7351 Firmware: affected versions not specified
  • AMD Epyc 7351p Firmware: affected versions not specified
  • AMD Epyc 7352 Firmware: affected versions not specified
  • AMD Epyc 7371 Firmware: affected versions not specified
  • AMD Epyc 73f3 Firmware: before milanpi-sp3_1.0.0.5 (fixed in milanpi-sp3_1.0.0.5)
  • AMD Epyc 7401 Firmware: affected versions not specified
  • AMD Epyc 7401p Firmware: affected versions not specified
  • and 82 more

Published 2022-02-04. Last modified 2026-06-17.