CVE-2018-12173

🗓️ 10 Oct 2018 18:00:00Reported by intelType

Insufficient access protection in Intel firmware may allow arbitrary code execution and privilege escalatio

Reporter	Title	Published	Views	Family All 9
CNVD	Intel Server Board, Server System and Compute Module Access Control Error Vulnerability	12 Oct 201800:00	–	cnvd
Cvelist	CVE-2018-12173	10 Oct 201818:00	–	cvelist
EUVD	EUVD-2018-4151	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards Firmware Advisory	12 Jul 201900:00	–	intel
Lenovo	Intel Server Board Firmware Vulnerability - Lenovo Support US	17 Apr 201914:13	–	lenovo
Lenovo	Intel Server Board Firmware Vulnerability - US	17 Apr 201914:13	–	lenovo
NVD	CVE-2018-12173	10 Oct 201818:29	–	nvd
OSV	CVE-2018-12173	10 Oct 201818:29	–	osv
Prion	Improper access control	10 Oct 201818:29	–	prion

NVD

Node

intel server_board_s2600bp_firmwareRange<00.01.0014

AND

intel server_board_s2600bpMatch-

Node

intel server_board_s2600wf_firmwareRange<00.01.0014

AND

intel server_board_s2600wfMatch-

Node

intel server_board_s2600st_firmwareRange<00.01.0014

AND

intel server_board_s2600stMatch-

Node

intel server_board_s2600bpr_firmwareRange<00.01.0014

AND

intel server_board_s2600bprMatch-

Node

intel server_board_s2600wfr_firmwareRange<00.01.0014

AND

intel server_board_s2600wfrMatch-

Node

intel server_board_s2600str_firmwareRange<00.01.0014

AND

intel server_board_s2600strMatch-

Node

intel compute_module_hns2600bp_firmwareRange<00.01.0014

AND

intel compute_module_hns2600bpMatch-

Node

intel compute_module_hns2600bpr_firmwareRange<00.01.0014

AND

intel compute_module_hns2600bprMatch-

Node

intel server_system_r2000wf_firmwareRange<00.01.0014

AND

intel server_system_r2000wfMatch-

Node

intel server_system_r1000wf_firmwareRange<00.01.0014

AND

intel server_system_r1000wfMatch-

Node

intel server_system_r1000wfr_firmwareRange<00.01.0014

AND

intel server_system_r1000wfrMatch-

Node

intel server_system_r2000wfr_firmwareRange<00.01.0014

AND

intel server_system_r2000wfrMatch-

Node

intel server_system_h2000g_firmwareRange<00.01.0014

AND

intel server_system_h2000gMatch-

Node

intel server_system_h2000gr_firmwareRange<00.01.0014

AND

intel server_system_h2000grMatch-

[
  {
    "product": "Intel Server Boards Firmware",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "before 00.01.0014"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00179.html
support	www.support.lenovo.com/us/en/solutions/LEN-24799

21 Nov 2024 03:44Current

7.9High risk

Vulners AI Score7.9

CVSS 27.2

CVSS 37.6

EPSS0.00042

CWE-732