Vulnerability Details CVE-2018-12198
Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.4%
CVSS Severity
CVSS v3 Score 6.0
CVSS v2 Score 2.1
References
- https://security.netapp.com/advisory/ntap-20190318-0001/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
- https://security.netapp.com/advisory/ntap-20190318-0001/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
Products affected by CVE-2018-12198
-
cpe:2.3:o:intel:server_platform_services_firmware:3.0.6.267.4
-
cpe:2.3:o:intel:server_platform_services_firmware:4.0
-
cpe:2.3:o:intel:server_platform_services_firmware:4.00.04.367
-
cpe:2.3:o:intel:server_platform_services_firmware:4.00.04.382
-
cpe:2.3:o:intel:server_platform_services_firmware:4.00.04.383
-
cpe:2.3:o:intel:server_platform_services_firmware:4.01.00.152.0
-
cpe:2.3:o:intel:server_platform_services_firmware:4.01.02.173
-
cpe:2.3:o:intel:server_platform_services_firmware:4.01.02.174
-
cpe:2.3:o:intel:server_platform_services_firmware:5.00.04.012
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_04.01.00.000.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_04.01.04.085.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_04.01.04.086.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_04.01.04.700.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_05.00.04.027.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e3_06.00.03.035.0
-
cpe:2.3:o:intel:server_platform_services_firmware:sps_e5_04.00.00.000.0