CVE-2018-12166 — Improper Input Validation in Intel Optane SSD DC P4800x Firmware

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 85.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Optane SSD DC P4800x FirmwareIntel Corporation Intel Optane SSD DC P4800x
Timeline
PublishedJan 10
Latest updateMay 14

Description

Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5intel_corporation/intel_optane_ssd_dc_p4800xbefore version E2010435.

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5736-37g9-53rq: Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially ena↗2022-05-14
▶
CVEList
CVE-2018-12166: Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially ena↗2019-01-10
▶
CVE-2018-12166 — Improper Input Validation in Intel | cvebase