Is CVE-2018-12205 actively exploited?

CVE-2018-12205 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2018-12205?

CVE-2018-12205 has a CVSS score of 6.8 (MEDIUM severity). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2018-12205?

Patch guidance is available from intel security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2018-12205.

CVE-2018-12205 - remediation guidance & executive summary

Q: Which products are affected by CVE-2018-12205?

4 products: intel platform sample firmware, intel platform sample firmware, intel silicon reference firmware, intel silicon reference firmware.

Description

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.

CVSS Metrics

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: physical
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-295

Metadata

Primary Vendor: INTEL
Published: 3/14/2019
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

intel : platform_sample_firmwareintel : platform_sample_firmwareintel : silicon_reference_firmwareintel : silicon_reference_firmware

Remediation Guidance

Executive Summary

View on NIST NVD