SynScan
Home
How it works
Pricing
Vulnerability Database
Breach Intelligence
Search Data
Database Index
Contact
Try it now!
CVE-2020-14032
Last update: Apr 13, 2023
Description
ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
Affected Software
References
Software
From
Fixed in
asrock / box-r1000_firmware
-
1.40
https://dannyodler.medium.com/attacking-the-golden-ring-on-amd-mini-pc-b7bfb217b437
https://www.asrock.com/support/index.us.asp?cat=BIOS
Details
Severity:
Critical
CVE:
CVE-2020-14032
Published:
Jul 23, 2021
Updated:
Apr 13, 2023
Exploit:
CVSS v3
Severity:
Critical
Score
: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
Severity:
High
Score:
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWEs
CWE-269