Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-12173

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

Published

2018-10-10T18:29:04.373

Last Modified

2024-11-21T03:44:41.757

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.6 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel server_board_s2600bp_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600bp - No
Operating System intel server_board_s2600wf_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600wf - No
Operating System intel server_board_s2600st_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600st - No
Operating System intel server_board_s2600bpr_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600bpr - No
Operating System intel server_board_s2600wfr_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600wfr - No
Operating System intel server_board_s2600str_firmware < 00.01.0014 Yes
Hardware intel server_board_s2600str - No
Operating System intel compute_module_hns2600bp_firmware < 00.01.0014 Yes
Hardware intel compute_module_hns2600bp - No
Operating System intel compute_module_hns2600bpr_firmware < 00.01.0014 Yes
Hardware intel compute_module_hns2600bpr - No
Operating System intel server_system_r2000wf_firmware < 00.01.0014 Yes
Hardware intel server_system_r2000wf - No
Operating System intel server_system_r1000wf_firmware < 00.01.0014 Yes
Hardware intel server_system_r1000wf - No
Operating System intel server_system_r1000wfr_firmware < 00.01.0014 Yes
Hardware intel server_system_r1000wfr - No
Operating System intel server_system_r2000wfr_firmware < 00.01.0014 Yes
Hardware intel server_system_r2000wfr - No
Operating System intel server_system_h2000g_firmware < 00.01.0014 Yes
Hardware intel server_system_h2000g - No
Operating System intel server_system_h2000gr_firmware < 00.01.0014 Yes
Hardware intel server_system_h2000gr - No
References