CVE Feed

    Dashboard / CVE / CVE-2018-12204

    CVE-2018-12204

    Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.

    Published:Mar 14, 2019
    Last Modified:Nov 21, 2024
    EPS:Mar 14, 2019
    EPSS Score:0.00159
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    Bbs2600bpb
    Vendor
    Intel
    Product
    Bbs2600bpq
    Vendor
    Intel
    Product
    Bbs2600bps
    Vendor
    Intel
    Product
    Bbs2600stb
    Vendor
    Intel
    Product
    Bbs2600stq
    Vendor
    Intel
    Product
    Bbs7200ap
    Vendor
    Intel
    Product
    Bbs7200apl
    Vendor
    Intel
    Product
    Dbs2600cw2r
    Vendor
    Intel
    Product
    Dbs2600cw2sr
    Vendor
    Intel
    Product
    Dbs2600cwtr
    Vendor
    Intel
    Product
    Dbs2600cwtsr
    Vendor
    Intel
    Product
    Hns2600bpb
    Vendor
    Intel
    Product
    Hns2600bpb24
    Vendor
    Intel
    Product
    Hns2600bpblc
    Vendor
    Intel
    Product
    Hns2600bpblc24
    Vendor
    Intel
    Product
    Hns2600bpq
    Vendor
    Intel
    Product
    Hns2600bpq24
    Vendor
    Intel
    Product
    Hns2600bps
    Vendor
    Intel
    Product
    Hns2600bps24
    Vendor
    Intel
    Product
    Hns2600kpfr
    Vendor
    Intel
    Product
    Hns2600kpr
    Vendor
    Intel
    Product
    Hns2600tp24r
    Vendor
    Intel
    Product
    Hns2600tp24sr
    Vendor
    Intel
    Product
    Hns2600tp24str
    Vendor
    Intel
    Product
    Hns2600tpfr
    Vendor
    Intel
    Product
    Hns2600tpnr
    Vendor
    Intel
    Product
    Hns2600tpr
    Vendor
    Intel
    Product
    Hns7200ap
    Vendor
    Intel
    Product
    Hns7200apl
    Vendor
    Intel
    Product
    Hns7200apr
    Vendor
    Intel
    Product
    Hns7200aprl
    Vendor
    Intel
    Product
    Platform Sample Firmware
    Vendor
    Intel
    Product
    R1208wftys
    Vendor
    Intel
    Product
    R1208wt2gsr
    Vendor
    Intel
    Product
    R1208wttgsr
    Vendor
    Intel
    Product
    R1304wf0ys
    Vendor
    Intel
    Product
    R1304wftys
    Vendor
    Intel
    Product
    R1304wt2gsr
    Vendor
    Intel
    Product
    R1304wttgsr
    Vendor
    Intel
    Product
    R2208wf0zs
    Vendor
    Intel
    Product
    R2208wfqzs
    Vendor
    Intel
    Product
    R2208wftzs
    Vendor
    Intel
    Product
    R2208wt2ysr
    Vendor
    Intel
    Product
    R2208wttyc1r
    Vendor
    Intel
    Product
    R2208wttysr
    Vendor
    Intel
    Product
    R2224wfqzs
    Vendor
    Intel
    Product
    R2224wftzs
    Vendor
    Intel
    Product
    R2224wttysr
    Vendor
    Intel
    Product
    R2308wftzs
    Vendor
    Intel
    Product
    R2308wttysr
    Vendor
    Intel
    Product
    R2312wf0np
    Vendor
    Intel
    Product
    R2312wfqzs
    Vendor
    Intel
    Product
    R2312wftzs
    Vendor
    Intel
    Product
    R2312wttysr
    Vendor
    Intel
    Product
    S2600kpfr
    Vendor
    Intel
    Product
    S2600kpr
    Vendor
    Intel
    Product
    S2600kptr
    Vendor
    Intel
    Product
    S2600stb
    Vendor
    Intel
    Product
    S2600stq
    Vendor
    Intel
    Product
    S2600tpfr
    Vendor
    Intel
    Product
    S2600tpnr
    Vendor
    Intel
    Product
    S2600tpr
    Vendor
    Intel
    Product
    S2600tptr
    Vendor
    Intel
    Product
    S2600wfo
    Vendor
    Intel
    Product
    S2600wfq
    Vendor
    Intel
    Product
    S2600wft
    Vendor
    Intel
    Product
    S2600wt2r
    Vendor
    Intel
    Product
    S2600wttr
    Vendor
    Intel
    Product
    S2600wtts1r
    Vendor
    Intel
    Product
    S7200apr
    Vendor
    Intel
    Product
    Silicon Reference Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-665 Improper Initialization

    Related CVEs

    CVE-2019-11182 (CVSS 7.5) — Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to po…
    CVE-2019-11181 (CVSS 7.8) — Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to po…
    CVE-2019-11180 (CVSS 7.5) — Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticate…
    CVE-2019-11179 (CVSS 6.5) — Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated …
    CVE-2019-11178 (CVSS 8.1) — Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potenti…
    CVE-2019-11177 (CVSS 7.5) — Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to …
    CVE-2019-11175 (CVSS 7.5) — Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticate…
    CVE-2019-11174 (CVSS 5.3) — Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated …
    CVE-2019-11173 (CVSS 7.1) — Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthentica…
    CVE-2019-11172 (CVSS 5.3) — Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to po…

    References

    https://security.netapp.com/advisory/ntap-20190318-0002/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us
    https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html
    https://security.netapp.com/advisory/ntap-20190318-0002/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us
    https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High