Lucene search

[email protected]CVE-2018-12204

HistoryMar 14, 2019 - 8:29 p.m.

CVE-2018-12204

2019-03-1420:29:00

CWE-665

[email protected]

web.nvd.nist.gov

cve-2018-12204

intel

firmware

privilege escalation

security vulnerability

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

26.9%

JSON

Improper memory initialization in Platform Sample/Silicon Reference firmware Intel® Server Board, Intel® Server System and Intel® Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.

Affected configurations

NVD

Node

intelplatform_sample_firmwareMatch-

AND

intelbbs2600bpbMatch-

intelbbs2600bpqMatch-

intelbbs2600bpsMatch-

intelbbs2600stbMatch-

intelbbs2600stqMatch-

intelbbs7200apMatch-

intelbbs7200aplMatch-

inteldbs2600cw2rMatch-

inteldbs2600cw2srMatch-

inteldbs2600cwtrMatch-

inteldbs2600cwtsrMatch-

intelhns2600bpbMatch-

intelhns2600bpb24Match-

intelhns2600bpblcMatch-

intelhns2600bpblc24Match-

intelhns2600bpqMatch-

intelhns2600bpq24Match-

intelhns2600bpsMatch-

intelhns2600bps24Match-

intelhns2600kpfrMatch-

intelhns2600kprMatch-

intelhns2600tp24rMatch-

intelhns2600tp24srMatch-

intelhns2600tp24strMatch-

intelhns2600tpfrMatch-

intelhns2600tpnrMatch-

intelhns2600tprMatch-

intelhns7200apMatch-

intelhns7200aplMatch-

intelhns7200aprMatch-

intelhns7200aprlMatch-

intelr1208wftysMatch-

intelr1208wt2gsrMatch-

intelr1208wttgsrMatch-

intelr1304wf0ysMatch-

intelr1304wftysMatch-

intelr1304wt2gsrMatch-

intelr1304wttgsrMatch-

intelr2208wf0zsMatch-

intelr2208wfqzsMatch-

intelr2208wftzsMatch-

intelr2208wt2ysrMatch-

intelr2208wttyc1rMatch-

intelr2208wttysrMatch-

intelr2224wfqzsMatch-

intelr2224wftzsMatch-

intelr2224wttysrMatch-

intelr2308wftzsMatch-

intelr2308wttysrMatch-

intelr2312wf0npMatch-

intelr2312wfqzsMatch-

intelr2312wftzsMatch-

intelr2312wttysrMatch-

intels2600kpfrMatch-

intels2600kprMatch-

intels2600kptrMatch-

intels2600stbMatch-

intels2600stqMatch-

intels2600tpfrMatch-

intels2600tpnrMatch-

intels2600tprMatch-

intels2600tptrMatch-

intels2600wfoMatch-

intels2600wfqMatch-

intels2600wftMatch-

intels2600wt2rMatch-

intels2600wttrMatch-

intels2600wtts1rMatch-

intels7200aprMatch-

Node

intelsilicon_reference_firmwareMatch-

AND

intelbbs2600bpbMatch-

intelbbs2600bpqMatch-

intelbbs2600bpsMatch-

intelbbs2600stbMatch-

intelbbs2600stqMatch-

intelbbs7200apMatch-

intelbbs7200aplMatch-

inteldbs2600cw2rMatch-

inteldbs2600cw2srMatch-

inteldbs2600cwtrMatch-

inteldbs2600cwtsrMatch-

intelhns2600bpbMatch-

intelhns2600bpb24Match-

intelhns2600bpblcMatch-

intelhns2600bpblc24Match-

intelhns2600bpqMatch-

intelhns2600bpq24Match-

intelhns2600bpsMatch-

intelhns2600bps24Match-

intelhns2600kpfrMatch-

intelhns2600kprMatch-

intelhns2600tp24rMatch-

intelhns2600tp24srMatch-

intelhns2600tp24strMatch-

intelhns2600tpfrMatch-

intelhns2600tpnrMatch-

intelhns2600tprMatch-

intelhns7200apMatch-

intelhns7200aplMatch-

intelhns7200aprMatch-

intelhns7200aprlMatch-

intelr1208wftysMatch-

intelr1208wt2gsrMatch-

intelr1208wttgsrMatch-

intelr1304wf0ysMatch-

intelr1304wftysMatch-

intelr1304wt2gsrMatch-

intelr1304wttgsrMatch-

intelr2208wf0zsMatch-

intelr2208wfqzsMatch-

intelr2208wftzsMatch-

intelr2208wt2ysrMatch-

intelr2208wttyc1rMatch-

intelr2208wttysrMatch-

intelr2224wfqzsMatch-

intelr2224wftzsMatch-

intelr2224wttysrMatch-

intelr2308wftzsMatch-

intelr2308wttysrMatch-

intelr2312wf0npMatch-

intelr2312wfqzsMatch-

intelr2312wftzsMatch-

intelr2312wttysrMatch-

intels2600kpfrMatch-

intels2600kprMatch-

intels2600kptrMatch-

intels2600stbMatch-

intels2600stqMatch-

intels2600tpfrMatch-

intels2600tpnrMatch-

intels2600tprMatch-

intels2600tptrMatch-

intels2600wfoMatch-

intels2600wfqMatch-

intels2600wftMatch-

intels2600wt2rMatch-

intels2600wttrMatch-

intels2600wtts1rMatch-

intels7200aprMatch-

CPENameOperatorVersion
intel:platform_sample_firmwareintel platform sample firmwareeq-

CPE	Name	Operator	Version
intel:platform_sample_firmware	intel platform sample firmware	eq	-

CNA Affected

[
  {
    "product": "Intel Platform Sample / Silicon Reference firmware",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple versions."
      }
    ]
  }
]