CVE-2018-12205

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.

Score

CVSS 3.0 6.8 Medium

Status

Modified - secure@intel.com

Published

2019-03-14

Last modified

2024-09-16

Weaknesses

CWE-295

Affected products

• Platform Sample Firmware (Intel)
• Silicon Reference Firmware (Intel)
• Intel Platform Sample Silicon Reference Firmware (Intel Corporation)

References

• https://security.netapp.com/advisory/ntap-20190318-0002/
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
• https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html