Read the docs
TI-2020-10287 Aliases CVE-2020-12967GHSA-36x8-2j7w-8439

AMD Secure Encrypted Virtualization

Priority LOW 35CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Why it matters now

EPSS 0.01683 77th percentileScored 2026-11-07
Fix Fixed SEV/SEV-ES (AMD): SEV-SNP

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDSEV/SEV-ESbefore SEV-SNPSEV-SNPPatch availableCNA
  • SEV/SEV-ES VendorAMD Affected before SEV-SNP Fixed in SEV-SNP Patch available CNA

CPE configurations NVD · 65

CPEVersionsRoleVendor
cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
  • cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
Show 55 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3101:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3151:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3201:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3251:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3255:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3351:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:epyc_embedded_3451:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
  • cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3101:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3151:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3201:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3251:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3255:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3351:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_embedded_3451:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD

Remediation

  • Fix · CNA SEV/SEV-ES (AMD) Fixed in SEV-SNP

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    AMD SEV/SEV-ES SEV-SNP

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-12967
  2. 2026-10-03 Alias added: GHSA-36x8-2j7w-8439

References

Advisory 1

  • TI-2021-08139 AMD Secure Encrypted Virtualization CVSS 3.1HIGH 7.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences