CVE-2018-12204

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-12204
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://security.netapp.com/advisory/ntap-20190318-0002/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:platform_sample_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:bbs2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs7200ap:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs7200apl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cw2r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cw2sr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cwtr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cwtsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600kpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600kpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24sr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24str:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpnr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200ap:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200apl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200apr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200aprl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wt2gsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wttgsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wt2gsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wttgsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wt2ysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wttyc1r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2308wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kptr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpnr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tptr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wfo:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wt2r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wttr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wtts1r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s7200apr:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:intel:silicon_reference_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:bbs2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs7200ap:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:bbs7200apl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cw2r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cw2sr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cwtr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:dbs2600cwtsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600kpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600kpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24sr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tp24str:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpnr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns2600tpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200ap:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200apl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200apr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hns7200aprl:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wt2gsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1208wttgsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wt2gsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r1304wttgsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wt2ysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wttyc1r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2208wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2224wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2308wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r2312wttysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600kptr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpfr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpnr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tpr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600tptr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wfo:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wt2r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wttr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s2600wtts1r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:s7200apr:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2019-03-14 20:29

Updated : 2023-12-10 12:59

NVD link : CVE-2018-12204

Mitre link : CVE-2018-12204

CVE.ORG link : CVE-2018-12204

JSON object : View

Products Affected

intel

  • hns2600tpfr
  • hns2600kpfr
  • r1304wftys
  • hns2600bps24
  • r2208wttyc1r
  • dbs2600cw2r
  • bbs2600stb
  • r2208wftzs
  • r2224wfqzs
  • hns2600bpb24
  • hns7200apr
  • hns7200ap
  • hns2600bps
  • bbs2600bpb
  • r2312wftzs
  • hns7200apl
  • bbs2600stq
  • s2600kpfr
  • dbs2600cw2sr
  • r2312wttysr
  • r1208wftys
  • hns2600bpblc24
  • s2600tpfr
  • r1304wt2gsr
  • s2600tptr
  • silicon_reference_firmware
  • bbs7200apl
  • bbs7200ap
  • r1304wf0ys
  • hns7200aprl
  • r2208wf0zs
  • r2208wt2ysr
  • r2208wttysr
  • r2308wttysr
  • r2312wfqzs
  • r1208wttgsr
  • s2600stq
  • s2600wfq
  • s2600tpr
  • hns2600kpr
  • s2600kpr
  • s2600wft
  • hns2600tp24str
  • s2600kptr
  • s2600wt2r
  • hns2600bpb
  • r2312wf0np
  • r2224wftzs
  • r2308wftzs
  • hns2600bpq24
  • r2224wttysr
  • bbs2600bpq
  • bbs2600bps
  • r1208wt2gsr
  • r2208wfqzs
  • dbs2600cwtsr
  • s2600tpnr
  • s2600wfo
  • s7200apr
  • dbs2600cwtr
  • hns2600tp24sr
  • hns2600tp24r
  • r1304wttgsr
  • hns2600tpnr
  • platform_sample_firmware
  • s2600wttr
  • s2600stb
  • s2600wtts1r
  • hns2600bpblc
  • hns2600bpq
  • hns2600tpr
CWE
CWE-665

Improper Initialization