CVE-2018-12171 - Vulnerability Details

Vendors	Products
Intel	Bbs2600bpb Bbs2600bpq Bbs2600bps Bbs2600stb Bbs2600stq Bmc Firmware Hns2600bpb Hns2600bpb24 Hns2600bpblc Hns2600bpblc24 Hns2600bpq Hns2600bpq24 Hns2600bps Hns2600bps24 R1208wftys R1304wf0ys R1304wftys R2208wf0zs R2208wfqzs R2208wftzs R2224wfqzs R2224wftzs R2308wftzs R2312wf0np R2312wfqzs R2312wftzs S2600stb S2600stq S2600wfo S2600wfq S2600wft

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Intel(R) Baseboard Management Controller (BMC) firmware", "vendor": "Intel Corporation", "versions": [{"status": "affected", "version": "Versions before 1.43.91f76955."}]}], "datePublic": "2018-09-11T00:00:00", "descriptions": [{"lang": "en", "value": "Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network."}], "problemTypes": [{"descriptions": [{"description": "Escalation of Privilege, Denial of Service", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-09-12T18:57:01", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "DATE_PUBLIC": "2018-09-11T00:00:00", "ID": "CVE-2018-12171", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) Baseboard Management Controller (BMC) firmware", "version": {"version_data": [{"version_value": "Versions before 1.43.91f76955."}]}}]}, "vendor_name": "Intel Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Escalation of Privilege, Denial of Service"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html", "refsource": "CONFIRM", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T08:30:58.489Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2018-12171", "datePublished": "2018-09-12T19:00:00Z", "dateReserved": "2018-06-11T00:00:00", "dateUpdated": "2024-09-16T20:02:17.695Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Intel(R) Baseboard Management Controller (BMC) firmware (string)

vendor : Intel Corporation (string)

versions : [ »

0 : { »

status : affected (string)

version : Versions before 1.43.91f76955. (string)

}

]

}

]

datePublic : 2018-09-11T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Escalation of Privilege, Denial of Service (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-09-12T18:57:01 (string)

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secure@intel.com (string)

DATE_PUBLIC : 2018-09-11T00:00:00 (string)

ID : CVE-2018-12171 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Intel(R) Baseboard Management Controller (BMC) firmware (string)

version : { »

version_data : [ »

0 : { »

version_value : Versions before 1.43.91f76955. (string)

}

]

}

]

}

vendor_name : Intel Corporation (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Escalation of Privilege, Denial of Service (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

refsource : CONFIRM (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T08:30:58.489Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

assignerShortName : intel (string)

cveId : CVE-2018-12171 (string)

datePublished : 2018-09-12T19:00:00Z (string)

dateReserved : 2018-06-11T00:00:00 (string)

dateUpdated : 2024-09-16T20:02:17.695Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B3F541B-3A23-4DD1-829D-2CF8A9698EDE", "versionEndExcluding": "1.43.91f76955", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:bbs2600bpb:-:*:*:*:*:*:*:*", "matchCriteriaId": "B49A0E57-126A-4C60-A748-5D357E7B4670", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:bbs2600bpq:-:*:*:*:*:*:*:*", "matchCriteriaId": "34BB3CD5-DF01-40A8-9906-5C5B306C1B85", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:bbs2600bps:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B3CC4D7-1756-44DB-814D-57106E6826C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:bbs2600stb:-:*:*:*:*:*:*:*", "matchCriteriaId": "7819ABC6-800C-4141-A31F-14CBE788EF62", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:bbs2600stq:-:*:*:*:*:*:*:*", "matchCriteriaId": "106C758A-F23A-48B3-8360-A10212AF50E3", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F08CC45-9AC9-4A00-83B9-F9D4970B0DE8", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F002684-C456-40F0-AA2A-97C79AE5EECA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*", "matchCriteriaId": "796E437A-B972-4D30-B0A4-53366693C7DF", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D9CC284-540E-492A-A0E6-A193DEAD3102", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*", "matchCriteriaId": "24786B0E-36AC-4DBD-8778-DC836CF81CB1", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*", "matchCriteriaId": "613CDC12-2D3E-4BF3-AE2D-DCDEBEAED03D", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EADDC0-0AAE-4445-9764-1C54E3898FFD", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*", "matchCriteriaId": "E09B1290-FAD0-4869-A1FA-A4D12BB602CD", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1DD69C7-9E7C-4569-9971-A06F77028BB7", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DEF6206-E94C-4C16-8D91-AD776D62F79F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A47AC30-315C-4E4B-BBBB-305FA5131281", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF575955-C7E1-4DD6-8AAE-5930EDFEDA93", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B83196F-06BD-41D6-A6B8-C7ABD25CA238", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "30E49457-D38D-4145-81F2-7FA4D463CD24", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "13C6540A-C5E4-46E5-BB7C-E4C53904AE68", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "D952C1D5-581F-4ADC-8DB5-3682DC8588CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "31EF6A93-7FDE-43A7-BB5D-1DD52318F60D", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*", "matchCriteriaId": "98B6DF59-DF1E-4D9C-B574-37DC398B16AB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "6982CB5F-4448-48D4-BD3A-782874AB2304", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "B14E3D1D-B614-458D-8F78-E25CC89B311E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*", "matchCriteriaId": "A08E8AD9-CA53-4F39-820E-D4A4D2D319EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DDFAF1C-E386-4F35-8A81-492713F10A92", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wfo:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CDAD0D9-C4DD-42B5-AC7F-4C53F406B762", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*", "matchCriteriaId": "F105271A-9DC1-42CE-9D19-E4A55BE1F04E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network."}, {"lang": "es", "value": "Escalado de privilegios en el firmware de Intel Baseboard Management Controller (BMC) en versiones anteriores a la 1.43.91f76955 podr\u00eda permitir que un usuario sin privilegios ejecute c\u00f3digo arbitrario o realice una denegaci\u00f3n de servicio (DoS) en la red."}], "id": "CVE-2018-12171", "lastModified": "2024-11-21T03:44:41.537", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-09-12T19:29:01.980", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9B3F541B-3A23-4DD1-829D-2CF8A9698EDE (string)

versionEndExcluding : 1.43.91f76955 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:bbs2600bpb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B49A0E57-126A-4C60-A748-5D357E7B4670 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:bbs2600bpq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 34BB3CD5-DF01-40A8-9906-5C5B306C1B85 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:bbs2600bps:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B3CC4D7-1756-44DB-814D-57106E6826C6 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:intel:bbs2600stb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7819ABC6-800C-4141-A31F-14CBE788EF62 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:intel:bbs2600stq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 106C758A-F23A-48B3-8360-A10212AF50E3 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4F08CC45-9AC9-4A00-83B9-F9D4970B0DE8 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F002684-C456-40F0-AA2A-97C79AE5EECA (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 796E437A-B972-4D30-B0A4-53366693C7DF (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0D9CC284-540E-492A-A0E6-A193DEAD3102 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 24786B0E-36AC-4DBD-8778-DC836CF81CB1 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 613CDC12-2D3E-4BF3-AE2D-DCDEBEAED03D (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F9EADDC0-0AAE-4445-9764-1C54E3898FFD (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E09B1290-FAD0-4869-A1FA-A4D12BB602CD (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F1DD69C7-9E7C-4569-9971-A06F77028BB7 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0DEF6206-E94C-4C16-8D91-AD776D62F79F (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A47AC30-315C-4E4B-BBBB-305FA5131281 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EF575955-C7E1-4DD6-8AAE-5930EDFEDA93 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B83196F-06BD-41D6-A6B8-C7ABD25CA238 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 30E49457-D38D-4145-81F2-7FA4D463CD24 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 13C6540A-C5E4-46E5-BB7C-E4C53904AE68 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D952C1D5-581F-4ADC-8DB5-3682DC8588CA (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 31EF6A93-7FDE-43A7-BB5D-1DD52318F60D (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98B6DF59-DF1E-4D9C-B574-37DC398B16AB (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6982CB5F-4448-48D4-BD3A-782874AB2304 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B14E3D1D-B614-458D-8F78-E25CC89B311E (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A08E8AD9-CA53-4F39-820E-D4A4D2D319EB (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6DDFAF1C-E386-4F35-8A81-492713F10A92 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:intel:s2600wfo:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4CDAD0D9-C4DD-42B5-AC7F-4C53F406B762 (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F105271A-9DC1-42CE-9D19-E4A55BE1F04E (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. (string)

}

1 : { »

lang : es (string)

value : Escalado de privilegios en el firmware de Intel Baseboard Management Controller (BMC) en versiones anteriores a la 1.43.91f76955 podría permitir que un usuario sin privilegios ejecute código arbitrario o realice una denegación de servicio (DoS) en la red. (string)

}

]

id : CVE-2018-12171 (string)

lastModified : 2024-11-21T03:44:41.537 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-09-12T19:29:01.980 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object