CVE-2018-12204

EPSS 0.16%
Published 14.03.2019 20:29:00
Last modified 21.11.2024 03:44:44
Source secure@intel.com
Teams watchlist Login
Open Login

Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Platform Sample Firmware Version-

   Intel ≫ Bbs2600bpb Version-
   Intel ≫ Bbs2600bpq Version-
   Intel ≫ Bbs2600bps Version-
   Intel ≫ Bbs2600stb Version-
   Intel ≫ Bbs2600stq Version-
   Intel ≫ Bbs7200ap Version-
   Intel ≫ Bbs7200apl Version-
   Intel ≫ Dbs2600cw2r Version-
   Intel ≫ Dbs2600cw2sr Version-
   Intel ≫ Dbs2600cwtr Version-
   Intel ≫ Dbs2600cwtsr Version-
   Intel ≫ Hns2600bpb Version-
   Intel ≫ Hns2600bpb24 Version-
   Intel ≫ Hns2600bpblc Version-
   Intel ≫ Hns2600bpblc24 Version-
   Intel ≫ Hns2600bpq Version-
   Intel ≫ Hns2600bpq24 Version-
   Intel ≫ Hns2600bps Version-
   Intel ≫ Hns2600bps24 Version-
   Intel ≫ Hns2600kpfr Version-
   Intel ≫ Hns2600kpr Version-
   Intel ≫ Hns2600tp24r Version-
   Intel ≫ Hns2600tp24sr Version-
   Intel ≫ Hns2600tp24str Version-
   Intel ≫ Hns2600tpfr Version-
   Intel ≫ Hns2600tpnr Version-
   Intel ≫ Hns2600tpr Version-
   Intel ≫ Hns7200ap Version-
   Intel ≫ Hns7200apl Version-
   Intel ≫ Hns7200apr Version-
   Intel ≫ Hns7200aprl Version-
   Intel ≫ R1208wftys Version-
   Intel ≫ R1208wt2gsr Version-
   Intel ≫ R1208wttgsr Version-
   Intel ≫ R1304wf0ys Version-
   Intel ≫ R1304wftys Version-
   Intel ≫ R1304wt2gsr Version-
   Intel ≫ R1304wttgsr Version-
   Intel ≫ R2208wf0zs Version-
   Intel ≫ R2208wfqzs Version-
   Intel ≫ R2208wftzs Version-
   Intel ≫ R2208wt2ysr Version-
   Intel ≫ R2208wttyc1r Version-
   Intel ≫ R2208wttysr Version-
   Intel ≫ R2224wfqzs Version-
   Intel ≫ R2224wftzs Version-
   Intel ≫ R2224wttysr Version-
   Intel ≫ R2308wftzs Version-
   Intel ≫ R2308wttysr Version-
   Intel ≫ R2312wf0np Version-
   Intel ≫ R2312wfqzs Version-
   Intel ≫ R2312wftzs Version-
   Intel ≫ R2312wttysr Version-
   Intel ≫ S2600kpfr Version-
   Intel ≫ S2600kpr Version-
   Intel ≫ S2600kptr Version-
   Intel ≫ S2600stb Version-
   Intel ≫ S2600stq Version-
   Intel ≫ S2600tpfr Version-
   Intel ≫ S2600tpnr Version-
   Intel ≫ S2600tpr Version-
   Intel ≫ S2600tptr Version-
   Intel ≫ S2600wfo Version-
   Intel ≫ S2600wfq Version-
   Intel ≫ S2600wft Version-
   Intel ≫ S2600wt2r Version-
   Intel ≫ S2600wttr Version-
   Intel ≫ S2600wtts1r Version-
   Intel ≫ S7200apr Version-

Intel ≫ Silicon Reference Firmware Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.16%	0.374

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.7	0.8	5.9	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://security.netapp.com/advisory/ntap-20190318-0002/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

Vendor Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us

https://nvd.nist.gov/vuln/detail/CVE-2018-12204

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-12204

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-12204

EUVD