CVE-2018-12167 — Improper Input Validation in Intel Optane SSD DC P4800x Firmware

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 85.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Optane SSD DC P4800x FirmwareIntel Corporation Intel Optane SSD DC P4800x
Timeline
PublishedJan 10
Latest updateMay 14

Description

Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5intel_corporation/intel_optane_ssd_dc_p4800xbefore version E2010435.

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jpwq-c2vh-6pj7: Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable↗2022-05-14
▶
CVEList
CVE-2018-12167: Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable↗2019-01-10
▶
CVE-2018-12167 — Improper Input Validation in Intel | cvebase