National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

CVE-2018-12202 Detail

Current Description

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.

Source:  MITRE
Description Last Modified:  03/14/2019
View Analysis Description

Impact

CVSS v3.0 Severity and Metrics:

Base Score: 6.7 MEDIUM
Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (V3 legend)
Impact Score: 5.9
Exploitability Score: 0.8


Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): High
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): High
Integrity (I): High
Availability (A): High

CVSS v2.0 Severity and Metrics:

Base Score: 7.2 HIGH
Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C) (V2 legend)
Impact Subscore: 10.0
Exploitability Subscore: 3.9


Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (AU): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete
Additional Information:
Allows unauthorized disclosure of information
Allows unauthorized modification
Allows disruption of service

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
https://security.netapp.com/advisory/ntap-20190318-0002/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html Vendor Advisory

Technical Details

Vulnerability Type (View All)

  • Permissions, Privileges, and Access Control (CWE-264)

Known Affected Software Configurations Switch to CPE 2.3

Configuration 1 ( hide )
 cpe:/o:intel:platform_sample_firmware:-
     Show Matching CPE(s)
Running on/with
 cpe:/h:intel:core_i3:8100
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8100h
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8100t
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8109u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8130u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8145u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8300
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8300t
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8350k
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8200y
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8250u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8259u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8265u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8269u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8300h
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8305g
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8350u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8400
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8400b
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8400h
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8400t
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8500
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8500b
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8500t
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8600
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8600k
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:8600t
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8086k
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8500y
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8550u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8559u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8565u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8650u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8700
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8700b
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8700k
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8700t
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8705g
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8706g
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8709g
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8750h
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8809g
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:8850h
     Show Matching CPE(s)

Configuration 2 ( hide )
 cpe:/o:intel:platform_sample_firmware:-
     Show Matching CPE(s)
Running on/with
 cpe:/h:intel:core_i3:7020u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7100
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7100e
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7100h
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7100t
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7100u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7101e
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7101te
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7102e
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7130u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7167u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7300
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7300t
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7320
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:7350k
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7200u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7260u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7267u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7287u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7300hq
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7300u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7360u
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7400
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7400t
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7440eq
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7440hq
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7442eq
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7500
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7500t
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7600
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7600k
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7600t
     Show Matching CPE(s)
 cpe:/h:intel:core_i5:7640x
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7500u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7560u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7567u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7600u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7660u
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7700
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7700hq
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7700k
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7700t
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7740x
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7800x
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7820eq
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7820hk
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7820hq
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7820x
     Show Matching CPE(s)
 cpe:/h:intel:core_i7:7920hq
     Show Matching CPE(s)

Configuration 3 ( hide )
 cpe:/o:intel:silicon_reference_firmware:-
     Show Matching CPE(s)
Running on/with
 cpe:/h:intel:core_i3:8100
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8100h
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8100t
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8109u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8130u
     Show Matching CPE(s)
 cpe:/h:intel:core_i3:8145u
     Show Matching CPE(s)

Configuration 4 ( hide )

Showing 100 of 188 CPEs, view all CPEs here.

Change History

3 change records found - show changes

Quick Info

CVE Dictionary Entry:
CVE-2018-12202
NVD Published Date:
03/14/2019
NVD Last Modified:
04/03/2019