ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-12173

—
CVSS 3.0
7.6 high
EPSS
<1%p34
Published
()
Modified
Description

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

Vendors
intel
Products
server board s2600bp firmware, server board s2600wf firmware, server board s2600st firmware, server board s2600bpr firmware, server board s2600wfr firmware, server board s2600str firmware, compute module hns2600bp firmware, compute module hns2600bpr firmware, server system r2000wf firmware, server system r1000wf firmware, server system r1000wfr firmware, server system r2000wfr firmware
Weakness
CWE-732
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.