CVE-2018-12205

EPSS 0.28%
Veröffentlicht 14.03.2019 20:29:00
Zuletzt bearbeitet 21.11.2024 03:44:45
Erkennungen
Login

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Platform Sample Firmware Version -

   Intel ≫ Core I3 Version 8100
   Intel ≫ Core I3 Version 8100h
   Intel ≫ Core I3 Version 8100t
   Intel ≫ Core I3 Version 8109u
   Intel ≫ Core I3 Version 8130u
   Intel ≫ Core I3 Version 8145u
   Intel ≫ Core I3 Version 8300
   Intel ≫ Core I3 Version 8300t
   Intel ≫ Core I3 Version 8350k
   Intel ≫ Core I5 Version 8200y
   Intel ≫ Core I5 Version 8250u
   Intel ≫ Core I5 Version 8259u
   Intel ≫ Core I5 Version 8265u
   Intel ≫ Core I5 Version 8269u
   Intel ≫ Core I5 Version 8300h
   Intel ≫ Core I5 Version 8305g
   Intel ≫ Core I5 Version 8350u
   Intel ≫ Core I5 Version 8400
   Intel ≫ Core I5 Version 8400b
   Intel ≫ Core I5 Version 8400h
   Intel ≫ Core I5 Version 8400t
   Intel ≫ Core I5 Version 8500
   Intel ≫ Core I5 Version 8500b
   Intel ≫ Core I5 Version 8500t
   Intel ≫ Core I5 Version 8600
   Intel ≫ Core I5 Version 8600k
   Intel ≫ Core I5 Version 8600t
   Intel ≫ Core I7 Version 8086k
   Intel ≫ Core I7 Version 8500y
   Intel ≫ Core I7 Version 8550u
   Intel ≫ Core I7 Version 8559u
   Intel ≫ Core I7 Version 8565u
   Intel ≫ Core I7 Version 8650u
   Intel ≫ Core I7 Version 8700
   Intel ≫ Core I7 Version 8700b
   Intel ≫ Core I7 Version 8700k
   Intel ≫ Core I7 Version 8700t
   Intel ≫ Core I7 Version 8705g
   Intel ≫ Core I7 Version 8706g
   Intel ≫ Core I7 Version 8709g
   Intel ≫ Core I7 Version 8750h
   Intel ≫ Core I7 Version 8809g
   Intel ≫ Core I7 Version 8850h

Intel ≫ Platform Sample Firmware Version -

   Intel ≫ Core I3 Version 7020u
   Intel ≫ Core I3 Version 7100
   Intel ≫ Core I3 Version 7100e
   Intel ≫ Core I3 Version 7100h
   Intel ≫ Core I3 Version 7100t
   Intel ≫ Core I3 Version 7100u
   Intel ≫ Core I3 Version 7101e
   Intel ≫ Core I3 Version 7101te
   Intel ≫ Core I3 Version 7102e
   Intel ≫ Core I3 Version 7130u
   Intel ≫ Core I3 Version 7167u
   Intel ≫ Core I3 Version 7300
   Intel ≫ Core I3 Version 7300t
   Intel ≫ Core I3 Version 7320
   Intel ≫ Core I3 Version 7350k
   Intel ≫ Core I5 Version 7200u
   Intel ≫ Core I5 Version 7260u
   Intel ≫ Core I5 Version 7267u
   Intel ≫ Core I5 Version 7287u
   Intel ≫ Core I5 Version 7300hq
   Intel ≫ Core I5 Version 7300u
   Intel ≫ Core I5 Version 7360u
   Intel ≫ Core I5 Version 7400
   Intel ≫ Core I5 Version 7400t
   Intel ≫ Core I5 Version 7440eq
   Intel ≫ Core I5 Version 7440hq
   Intel ≫ Core I5 Version 7442eq
   Intel ≫ Core I5 Version 7500
   Intel ≫ Core I5 Version 7500t
   Intel ≫ Core I5 Version 7600
   Intel ≫ Core I5 Version 7600k
   Intel ≫ Core I5 Version 7600t
   Intel ≫ Core I5 Version 7640x
   Intel ≫ Core I7 Version 7500u
   Intel ≫ Core I7 Version 7560u
   Intel ≫ Core I7 Version 7567u
   Intel ≫ Core I7 Version 7600u
   Intel ≫ Core I7 Version 7660u
   Intel ≫ Core I7 Version 7700
   Intel ≫ Core I7 Version 7700hq
   Intel ≫ Core I7 Version 7700k
   Intel ≫ Core I7 Version 7700t
   Intel ≫ Core I7 Version 7740x
   Intel ≫ Core I7 Version 7800x
   Intel ≫ Core I7 Version 7820eq
   Intel ≫ Core I7 Version 7820hk
   Intel ≫ Core I7 Version 7820hq
   Intel ≫ Core I7 Version 7820x
   Intel ≫ Core I7 Version 7920hq

Intel ≫ Silicon Reference Firmware Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.196

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	0.9	5.9	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://security.netapp.com/advisory/ntap-20190318-0002/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-12205

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-12205

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-12205

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-12205