Every CVE Search/ Get API key

CVE-2020-12951

Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations.

7.0 High

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.22%Down 0.2 points since Nov 17, 2021
90%50%10%1%

What each source reports

NVD Score used 7.0

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Record
CVE-2020-12951
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Record
CVE-2020-12951
Updated
2026-11-02
EUVDEUVD-2020-5231 No score

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.

Record
EUVD-2020-5231
Updated
2026-11-03
GitHub AdvisoriesGHSA-wf2q-wpcg-q95r 7.0

Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations.

Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations.

Record
GHSA-wf2q-wpcg-q95r
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02

Affected products

Show 48 moreShow less

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-12951 is a high vulnerability (CVSS 7.0) in Amd Athlon™ Series, published November 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.

References

MoveEnter Open