CVEvulnerability
CVE-2018-12205
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-295
Description
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
Affected configurations
• intel platform sample firmware
• intel silicon reference firmware
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://security.netapp.com/advisory/ntap-20190318-0002/ security.netapp.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us support.hpe.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html Vendor Advisory
- https://security.netapp.com/advisory/ntap-20190318-0002/ security.netapp.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us support.hpe.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html Vendor Advisory