CVE-2018-12205

EPSS 0.12%
Published 14.03.2019 20:29:00
Last modified 21.11.2024 03:44:45
Source secure@intel.com
Teams watchlist Login
Open Login

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Platform Sample Firmware Version-

   Intel ≫ Core I3 Version8100
   Intel ≫ Core I3 Version8100h
   Intel ≫ Core I3 Version8100t
   Intel ≫ Core I3 Version8109u
   Intel ≫ Core I3 Version8130u
   Intel ≫ Core I3 Version8145u
   Intel ≫ Core I3 Version8300
   Intel ≫ Core I3 Version8300t
   Intel ≫ Core I3 Version8350k
   Intel ≫ Core I5 Version8200y
   Intel ≫ Core I5 Version8250u
   Intel ≫ Core I5 Version8259u
   Intel ≫ Core I5 Version8265u
   Intel ≫ Core I5 Version8269u
   Intel ≫ Core I5 Version8300h
   Intel ≫ Core I5 Version8305g
   Intel ≫ Core I5 Version8350u
   Intel ≫ Core I5 Version8400
   Intel ≫ Core I5 Version8400b
   Intel ≫ Core I5 Version8400h
   Intel ≫ Core I5 Version8400t
   Intel ≫ Core I5 Version8500
   Intel ≫ Core I5 Version8500b
   Intel ≫ Core I5 Version8500t
   Intel ≫ Core I5 Version8600
   Intel ≫ Core I5 Version8600k
   Intel ≫ Core I5 Version8600t
   Intel ≫ Core I7 Version8086k
   Intel ≫ Core I7 Version8500y
   Intel ≫ Core I7 Version8550u
   Intel ≫ Core I7 Version8559u
   Intel ≫ Core I7 Version8565u
   Intel ≫ Core I7 Version8650u
   Intel ≫ Core I7 Version8700
   Intel ≫ Core I7 Version8700b
   Intel ≫ Core I7 Version8700k
   Intel ≫ Core I7 Version8700t
   Intel ≫ Core I7 Version8705g
   Intel ≫ Core I7 Version8706g
   Intel ≫ Core I7 Version8709g
   Intel ≫ Core I7 Version8750h
   Intel ≫ Core I7 Version8809g
   Intel ≫ Core I7 Version8850h

Intel ≫ Platform Sample Firmware Version-

   Intel ≫ Core I3 Version7020u
   Intel ≫ Core I3 Version7100
   Intel ≫ Core I3 Version7100e
   Intel ≫ Core I3 Version7100h
   Intel ≫ Core I3 Version7100t
   Intel ≫ Core I3 Version7100u
   Intel ≫ Core I3 Version7101e
   Intel ≫ Core I3 Version7101te
   Intel ≫ Core I3 Version7102e
   Intel ≫ Core I3 Version7130u
   Intel ≫ Core I3 Version7167u
   Intel ≫ Core I3 Version7300
   Intel ≫ Core I3 Version7300t
   Intel ≫ Core I3 Version7320
   Intel ≫ Core I3 Version7350k
   Intel ≫ Core I5 Version7200u
   Intel ≫ Core I5 Version7260u
   Intel ≫ Core I5 Version7267u
   Intel ≫ Core I5 Version7287u
   Intel ≫ Core I5 Version7300hq
   Intel ≫ Core I5 Version7300u
   Intel ≫ Core I5 Version7360u
   Intel ≫ Core I5 Version7400
   Intel ≫ Core I5 Version7400t
   Intel ≫ Core I5 Version7440eq
   Intel ≫ Core I5 Version7440hq
   Intel ≫ Core I5 Version7442eq
   Intel ≫ Core I5 Version7500
   Intel ≫ Core I5 Version7500t
   Intel ≫ Core I5 Version7600
   Intel ≫ Core I5 Version7600k
   Intel ≫ Core I5 Version7600t
   Intel ≫ Core I5 Version7640x
   Intel ≫ Core I7 Version7500u
   Intel ≫ Core I7 Version7560u
   Intel ≫ Core I7 Version7567u
   Intel ≫ Core I7 Version7600u
   Intel ≫ Core I7 Version7660u
   Intel ≫ Core I7 Version7700
   Intel ≫ Core I7 Version7700hq
   Intel ≫ Core I7 Version7700k
   Intel ≫ Core I7 Version7700t
   Intel ≫ Core I7 Version7740x
   Intel ≫ Core I7 Version7800x
   Intel ≫ Core I7 Version7820eq
   Intel ≫ Core I7 Version7820hk
   Intel ≫ Core I7 Version7820hq
   Intel ≫ Core I7 Version7820x
   Intel ≫ Core I7 Version7920hq

Intel ≫ Silicon Reference Firmware Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.12%	0.312

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	0.9	5.9	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://security.netapp.com/advisory/ntap-20190318-0002/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-12205

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-12205

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-12205

EUVD