CVE-2020-12927 Privilege escalation in AMD VBIOS Flash Tool SDK
An authenticated user can escalate privileges to NT authority system via a vulnerability in the AMD VBIOS Flash Tool SDK.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12927?
CVE-2020-12927 is a high-severity vulnerability in AMD VBIOS Flash Tool SDK, published on 12 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system.
Weakness: CWE-749
Which versions are affected by CVE-2020-12927?
It affects 1 product.
Products include Amd Vbios Flash Tool Software Development Kit.
How do I fix CVE-2020-12927?
No fix has been published for CVE-2020-12927 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-12927 being exploited?
There is no known exploitation of CVE-2020-12927 in the wild and no public exploit code.
Sources
Also known as GHSA-wppc-2hf4-hh9j.