CVE-2018-12205 : Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Proc

CVSS scores for CVE-2018-12205

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.8	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-12205

CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-12205

https://security.netapp.com/advisory/ntap-20190318-0002/

Intel SA-00191 Firmware Vulnerabilities in NetApp Products | NetApp Product Security

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

INTEL-SA-00191
Vendor Advisory

CVEs referencing this url
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

HPESBHF03912 rev.2 - Certain HPE Servers with a UEFI-based BIOS, Multiple Local Vulnerabilities

CVEs referencing this url

Products affected by CVE-2018-12205

Intel » Platform Sample Firmware » Version: N/A
cpe:2.3:o:intel:platform_sample_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3 » Version: 8100
When used together with: Intel » Core I3 » Version: 8100h
When used together with: Intel » Core I3 » Version: 8100t
When used together with: Intel » Core I3 » Version: 8109u
When used together with: Intel » Core I3 » Version: 8130u
When used together with: Intel » Core I3 » Version: 8145u
When used together with: Intel » Core I3 » Version: 8300
When used together with: Intel » Core I3 » Version: 8300t
When used together with: Intel » Core I3 » Version: 8350k
When used together with: Intel » Core I5 » Version: 8200y
When used together with: Intel » Core I5 » Version: 8250u
When used together with: Intel » Core I5 » Version: 8259u
When used together with: Intel » Core I5 » Version: 8265u
When used together with: Intel » Core I5 » Version: 8269u
When used together with: Intel » Core I5 » Version: 8300h
When used together with: Intel » Core I5 » Version: 8305g
When used together with: Intel » Core I5 » Version: 8350u
When used together with: Intel » Core I5 » Version: 8400
When used together with: Intel » Core I5 » Version: 8400b
When used together with: Intel » Core I5 » Version: 8400h
When used together with: Intel » Core I5 » Version: 8400t
When used together with: Intel » Core I5 » Version: 8500
When used together with: Intel » Core I5 » Version: 8500b
When used together with: Intel » Core I5 » Version: 8500t
When used together with: Intel » Core I5 » Version: 8600
When used together with: Intel » Core I5 » Version: 8600k
When used together with: Intel » Core I5 » Version: 8600t
When used together with: Intel » Core I7 » Version: 8086k
When used together with: Intel » Core I7 » Version: 8500y
When used together with: Intel » Core I7 » Version: 8550u
When used together with: Intel » Core I7 » Version: 8559u
When used together with: Intel » Core I7 » Version: 8565u
When used together with: Intel » Core I7 » Version: 8650u
When used together with: Intel » Core I7 » Version: 8700
When used together with: Intel » Core I7 » Version: 8700b
When used together with: Intel » Core I7 » Version: 8700k
When used together with: Intel » Core I7 » Version: 8700t
When used together with: Intel » Core I7 » Version: 8705g
When used together with: Intel » Core I7 » Version: 8706g
When used together with: Intel » Core I7 » Version: 8709g
When used together with: Intel » Core I7 » Version: 8750h
When used together with: Intel » Core I7 » Version: 8809g
When used together with: Intel » Core I7 » Version: 8850h
Intel » Silicon Reference Firmware » Version: N/A
cpe:2.3:o:intel:silicon_reference_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3 » Version: 8100
When used together with: Intel » Core I3 » Version: 8100h
When used together with: Intel » Core I3 » Version: 8100t
When used together with: Intel » Core I3 » Version: 8109u
When used together with: Intel » Core I3 » Version: 8130u
When used together with: Intel » Core I3 » Version: 8145u
When used together with: Intel » Core I3 » Version: 8300
When used together with: Intel » Core I3 » Version: 8300t
When used together with: Intel » Core I3 » Version: 8350k
When used together with: Intel » Core I5 » Version: 8200y
When used together with: Intel » Core I5 » Version: 8250u
When used together with: Intel » Core I5 » Version: 8259u
When used together with: Intel » Core I5 » Version: 8265u
When used together with: Intel » Core I5 » Version: 8269u
When used together with: Intel » Core I5 » Version: 8300h
When used together with: Intel » Core I5 » Version: 8305g
When used together with: Intel » Core I5 » Version: 8350u
When used together with: Intel » Core I5 » Version: 8400
When used together with: Intel » Core I5 » Version: 8400b
When used together with: Intel » Core I5 » Version: 8400h
When used together with: Intel » Core I5 » Version: 8400t
When used together with: Intel » Core I5 » Version: 8500
When used together with: Intel » Core I5 » Version: 8500b
When used together with: Intel » Core I5 » Version: 8500t
When used together with: Intel » Core I5 » Version: 8600
When used together with: Intel » Core I5 » Version: 8600k
When used together with: Intel » Core I5 » Version: 8600t
When used together with: Intel » Core I7 » Version: 8086k
When used together with: Intel » Core I7 » Version: 8500y
When used together with: Intel » Core I7 » Version: 8550u
When used together with: Intel » Core I7 » Version: 8559u
When used together with: Intel » Core I7 » Version: 8565u
When used together with: Intel » Core I7 » Version: 8650u
When used together with: Intel » Core I7 » Version: 8700
When used together with: Intel » Core I7 » Version: 8700b
When used together with: Intel » Core I7 » Version: 8700k
When used together with: Intel » Core I7 » Version: 8700t
When used together with: Intel » Core I7 » Version: 8705g
When used together with: Intel » Core I7 » Version: 8706g
When used together with: Intel » Core I7 » Version: 8709g
When used together with: Intel » Core I7 » Version: 8750h
When used together with: Intel » Core I7 » Version: 8809g
When used together with: Intel » Core I7 » Version: 8850h

Vulnerability Details : CVE-2018-12205

Exploit prediction scoring system (EPSS) score for CVE-2018-12205

CVSS scores for CVE-2018-12205

CWE ids for CVE-2018-12205

References for CVE-2018-12205

Products affected by CVE-2018-12205