CVE-2018-12204 : Improper memory initialization in Platform Sample/Silicon Reference firmware Int

Products affected by CVE-2018-12204

Intel » Platform Sample Firmware » Version: N/A
cpe:2.3:o:intel:platform_sample_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Bbs2600bpb » Version: N/A
When used together with: Intel » Bbs2600bpq » Version: N/A
When used together with: Intel » Bbs2600bps » Version: N/A
When used together with: Intel » Bbs2600stb » Version: N/A
When used together with: Intel » Bbs2600stq » Version: N/A
When used together with: Intel » Bbs7200ap » Version: N/A
When used together with: Intel » Bbs7200apl » Version: N/A
When used together with: Intel » Dbs2600cw2r » Version: N/A
When used together with: Intel » Dbs2600cw2sr » Version: N/A
When used together with: Intel » Dbs2600cwtr » Version: N/A
When used together with: Intel » Dbs2600cwtsr » Version: N/A
When used together with: Intel » Hns2600bpb » Version: N/A
When used together with: Intel » Hns2600bpb24 » Version: N/A
When used together with: Intel » Hns2600bpblc » Version: N/A
When used together with: Intel » Hns2600bpblc24 » Version: N/A
When used together with: Intel » Hns2600bpq » Version: N/A
When used together with: Intel » Hns2600bpq24 » Version: N/A
When used together with: Intel » Hns2600bps » Version: N/A
When used together with: Intel » Hns2600bps24 » Version: N/A
When used together with: Intel » Hns2600kpfr » Version: N/A
When used together with: Intel » Hns2600kpr » Version: N/A
When used together with: Intel » Hns2600tp24r » Version: N/A
When used together with: Intel » Hns2600tp24sr » Version: N/A
When used together with: Intel » Hns2600tp24str » Version: N/A
When used together with: Intel » Hns2600tpfr » Version: N/A
When used together with: Intel » Hns2600tpnr » Version: N/A
When used together with: Intel » Hns2600tpr » Version: N/A
When used together with: Intel » Hns7200ap » Version: N/A
When used together with: Intel » Hns7200apl » Version: N/A
When used together with: Intel » Hns7200apr » Version: N/A
When used together with: Intel » Hns7200aprl » Version: N/A
When used together with: Intel » R1208wftys » Version: N/A
When used together with: Intel » R1208wt2gsr » Version: N/A
When used together with: Intel » R1208wttgsr » Version: N/A
When used together with: Intel » R1304wf0ys » Version: N/A
When used together with: Intel » R1304wftys » Version: N/A
When used together with: Intel » R1304wt2gsr » Version: N/A
When used together with: Intel » R1304wttgsr » Version: N/A
When used together with: Intel » R2208wf0zs » Version: N/A
When used together with: Intel » R2208wfqzs » Version: N/A
When used together with: Intel » R2208wftzs » Version: N/A
When used together with: Intel » R2208wt2ysr » Version: N/A
When used together with: Intel » R2208wttyc1r » Version: N/A
When used together with: Intel » R2208wttysr » Version: N/A
When used together with: Intel » R2224wfqzs » Version: N/A
When used together with: Intel » R2224wftzs » Version: N/A
When used together with: Intel » R2224wttysr » Version: N/A
When used together with: Intel » R2308wftzs » Version: N/A
When used together with: Intel » R2308wttysr » Version: N/A
When used together with: Intel » R2312wf0np » Version: N/A
When used together with: Intel » R2312wfqzs » Version: N/A
When used together with: Intel » R2312wftzs » Version: N/A
When used together with: Intel » R2312wttysr » Version: N/A
When used together with: Intel » S2600kpfr » Version: N/A
When used together with: Intel » S2600kpr » Version: N/A
When used together with: Intel » S2600kptr » Version: N/A
When used together with: Intel » S2600stb » Version: N/A
When used together with: Intel » S2600stq » Version: N/A
When used together with: Intel » S2600tpfr » Version: N/A
When used together with: Intel » S2600tpnr » Version: N/A
When used together with: Intel » S2600tpr » Version: N/A
When used together with: Intel » S2600tptr » Version: N/A
When used together with: Intel » S2600wfo » Version: N/A
When used together with: Intel » S2600wfq » Version: N/A
When used together with: Intel » S2600wft » Version: N/A
When used together with: Intel » S2600wt2r » Version: N/A
When used together with: Intel » S2600wttr » Version: N/A
When used together with: Intel » S2600wtts1r » Version: N/A
When used together with: Intel » S7200apr » Version: N/A
Intel » Silicon Reference Firmware » Version: N/A
cpe:2.3:o:intel:silicon_reference_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Bbs2600bpb » Version: N/A
When used together with: Intel » Bbs2600bpq » Version: N/A
When used together with: Intel » Bbs2600bps » Version: N/A
When used together with: Intel » Bbs2600stb » Version: N/A
When used together with: Intel » Bbs2600stq » Version: N/A
When used together with: Intel » Bbs7200ap » Version: N/A
When used together with: Intel » Bbs7200apl » Version: N/A
When used together with: Intel » Dbs2600cw2r » Version: N/A
When used together with: Intel » Dbs2600cw2sr » Version: N/A
When used together with: Intel » Dbs2600cwtr » Version: N/A
When used together with: Intel » Dbs2600cwtsr » Version: N/A
When used together with: Intel » Hns2600bpb » Version: N/A
When used together with: Intel » Hns2600bpb24 » Version: N/A
When used together with: Intel » Hns2600bpblc » Version: N/A
When used together with: Intel » Hns2600bpblc24 » Version: N/A
When used together with: Intel » Hns2600bpq » Version: N/A
When used together with: Intel » Hns2600bpq24 » Version: N/A
When used together with: Intel » Hns2600bps » Version: N/A
When used together with: Intel » Hns2600bps24 » Version: N/A
When used together with: Intel » Hns2600kpfr » Version: N/A
When used together with: Intel » Hns2600kpr » Version: N/A
When used together with: Intel » Hns2600tp24r » Version: N/A
When used together with: Intel » Hns2600tp24sr » Version: N/A
When used together with: Intel » Hns2600tp24str » Version: N/A
When used together with: Intel » Hns2600tpfr » Version: N/A
When used together with: Intel » Hns2600tpnr » Version: N/A
When used together with: Intel » Hns2600tpr » Version: N/A
When used together with: Intel » Hns7200ap » Version: N/A
When used together with: Intel » Hns7200apl » Version: N/A
When used together with: Intel » Hns7200apr » Version: N/A
When used together with: Intel » Hns7200aprl » Version: N/A
When used together with: Intel » R1208wftys » Version: N/A
When used together with: Intel » R1208wt2gsr » Version: N/A
When used together with: Intel » R1208wttgsr » Version: N/A
When used together with: Intel » R1304wf0ys » Version: N/A
When used together with: Intel » R1304wftys » Version: N/A
When used together with: Intel » R1304wt2gsr » Version: N/A
When used together with: Intel » R1304wttgsr » Version: N/A
When used together with: Intel » R2208wf0zs » Version: N/A
When used together with: Intel » R2208wfqzs » Version: N/A
When used together with: Intel » R2208wftzs » Version: N/A
When used together with: Intel » R2208wt2ysr » Version: N/A
When used together with: Intel » R2208wttyc1r » Version: N/A
When used together with: Intel » R2208wttysr » Version: N/A
When used together with: Intel » R2224wfqzs » Version: N/A
When used together with: Intel » R2224wftzs » Version: N/A
When used together with: Intel » R2224wttysr » Version: N/A
When used together with: Intel » R2308wftzs » Version: N/A
When used together with: Intel » R2308wttysr » Version: N/A
When used together with: Intel » R2312wf0np » Version: N/A
When used together with: Intel » R2312wfqzs » Version: N/A
When used together with: Intel » R2312wftzs » Version: N/A
When used together with: Intel » R2312wttysr » Version: N/A
When used together with: Intel » S2600kpfr » Version: N/A
When used together with: Intel » S2600kpr » Version: N/A
When used together with: Intel » S2600kptr » Version: N/A
When used together with: Intel » S2600stb » Version: N/A
When used together with: Intel » S2600stq » Version: N/A
When used together with: Intel » S2600tpfr » Version: N/A
When used together with: Intel » S2600tpnr » Version: N/A
When used together with: Intel » S2600tpr » Version: N/A
When used together with: Intel » S2600tptr » Version: N/A
When used together with: Intel » S2600wfo » Version: N/A
When used together with: Intel » S2600wfq » Version: N/A
When used together with: Intel » S2600wft » Version: N/A
When used together with: Intel » S2600wt2r » Version: N/A
When used together with: Intel » S2600wttr » Version: N/A
When used together with: Intel » S2600wtts1r » Version: N/A
When used together with: Intel » S7200apr » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-12204

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 25 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-12204

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.7	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-12204

CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-12204

https://security.netapp.com/advisory/ntap-20190318-0002/

Intel SA-00191 Firmware Vulnerabilities in NetApp Products | NetApp Product Security

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

INTEL-SA-00191
Vendor Advisory

CVEs referencing this url
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

HPESBHF03912 rev.2 - Certain HPE Servers with a UEFI-based BIOS, Multiple Local Vulnerabilities

CVEs referencing this url
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us

HPESBHF03978 rev.1 - HPE Superdome Flex Server, Multiple Remote Vulnerabilities

CVEs referencing this url
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us

HPESBHF03929 rev.1 - HPE Superdome Flex Server, Local Denial of Service, Disclosure of Information, and Escalation of Privilege

Vulnerability Details : CVE-2018-12204

Products affected by CVE-2018-12204

Exploit prediction scoring system (EPSS) score for CVE-2018-12204

CVSS scores for CVE-2018-12204

CWE ids for CVE-2018-12204

References for CVE-2018-12204