Medium severity · published Mar 14, 2019
CVE-2018-12205
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow…
6.8
CVSS
0.3%
EPSS
No
On KEV
Description
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intel Platform Sample / Silicon Reference firmware · Intel Corporation
Multiple versions. · source: vendor
PS
Platform Sample Firmware · Intel
All versions, or not specified · source: NVD
SR
Silicon Reference Firmware · Intel
All versions, or not specified · source: NVD
Affected product
IP
Intel Platform Sample / Silicon Reference firmware
Intel Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-12205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-12205
security.netapp.com
https://security.netapp.com/advisory/ntap-20190318-0002/
support.hpe.com
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
More from Intel Platform Sample / Silicon Reference firmware
6.7
CVE-2018-12201
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R)…
6.7
CVE-2018-12202
Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow…
6.7
CVE-2018-12203
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged…
6.7
CVE-2018-12204
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to…