CVE-2020-12928
Quick assessment
Affected
n/a AMD Ryzen Master
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
AMD Ryzen是美国AMD公司的一款中央处理器（CPU）。 AMD Ryzen Master V15版本存在安全漏洞，该漏洞源于在中动态加载的AMD驱动程序可能允许任何经过身份验证的用户升级到NT权限系统的特权。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-12928
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
暴露危险的方法或函数
Source: CVE Program / CVE List V5
Vulnerability Title
AMD Ryzen 安全特征问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Ryzen是美国AMD公司的一款中央处理器（CPU）。 AMD Ryzen Master V15版本存在安全漏洞，该漏洞源于在中动态加载的AMD驱动程序可能允许任何经过身份验证的用户升级到NT权限系统的特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | AMD Ryzen Master | Fixed in version Ryzen Master 2.2.0.1543 and later | - |
|
II. Public POCs for CVE-2020-12928
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Early 2019 - late 2020. R.I.P. CVE-2020-12928 https://h0mbre.github.io/RyzenMaster_CVE/# | https://github.com/ekknod/AmdRyzenMasterCheat | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-12928
请登录查看更多情报信息。
Other References for CVE-2020-12928 (1)
-
https://www.amd.com/en/corporate/product-security x_refsource_MISC
Same Patch Batch · n/a · 2020-10-13 · 7 CVEs total
| CVE-2020-7743 | 7.3 HIGH | Prototype Pollution |
| CVE-2020-12911 | AMD Radeon Directx 11 Driver缓冲区错误漏洞 | |
| CVE-2020-12933 | AMD Radeon Directx 11 Driver 处理程序功能缓冲区错误漏洞 | |
| CVE-2020-25645 | Linux kernel 加密问题漏洞 | |
| CVE-2020-13957 | Apache Solr 安全漏洞 | |
| CVE-2018-20243 | fineract jira 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-78187
Piwigo Public Authentication cross site scripting -
CVE-2026-78186
Open5GS HSS hss-cx-path.c assertion -
CVE-2026-78178
jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollu -
CVE-2026-78158
Open5GS AMF UEContextReleaseRequest Path improper authorizat -
CVE-2026-78157
Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-b
Same weakness: CWE-749
-
CVE-2026-18263
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-18262
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-13121
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-68823
Azure Confidential Ledger Remote Code Execution Vulnerabilit -
CVE-2026-18901
H3C NX15 Web API esps service.add routine
V. Comments for CVE-2020-12928
No comments yet