Medium severity · published Mar 14, 2019
CVE-2018-12201
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R)…
6.7
CVSS
0.5%
EPSS
No
On KEV
Description
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intel Platform Sample / Silicon Reference firmware · Intel Corporation
Multiple versions. · source: vendor
PS
Platform Sample Firmware · Intel
All versions, or not specified · source: NVD
SR
Silicon Reference Firmware · Intel
All versions, or not specified · source: NVD
Affected product
IP
Intel Platform Sample / Silicon Reference firmware
Intel Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-12201
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-12201
security.netapp.com
https://security.netapp.com/advisory/ntap-20190318-0002/
support.hpe.com
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
More from Intel Platform Sample / Silicon Reference firmware
6.8
CVE-2018-12205
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow…
6.7
CVE-2018-12202
Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow…
6.7
CVE-2018-12203
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged…
6.7
CVE-2018-12204
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to…