FKIE_CVE-2018-12171

Vulnerability from fkie_nvd - Published: 2018-09-12 19:29 - Updated: 2024-11-21 03:44
Severity ?
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
References
secure@intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.htmlVendor Advisory
Impacted products
Vendor Product Version
intel bmc_firmware *
intel bbs2600bpb -
intel bbs2600bpq -
intel bbs2600bps -
intel bbs2600stb -
intel bbs2600stq -
intel hns2600bpb -
intel hns2600bpb24 -
intel hns2600bpblc -
intel hns2600bpblc24 -
intel hns2600bpq -
intel hns2600bpq24 -
intel hns2600bps -
intel hns2600bps24 -
intel r1208wftys -
intel r1304wf0ys -
intel r1304wftys -
intel r2208wf0zs -
intel r2208wfqzs -
intel r2208wftzs -
intel r2224wfqzs -
intel r2224wftzs -
intel r2308wftzs -
intel r2312wf0np -
intel r2312wfqzs -
intel r2312wftzs -
intel s2600stb -
intel s2600stq -
intel s2600wfo -
intel s2600wfq -
intel s2600wft -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B3F541B-3A23-4DD1-829D-2CF8A9698EDE",
              "versionEndExcluding": "1.43.91f76955",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:bbs2600bpb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B49A0E57-126A-4C60-A748-5D357E7B4670",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:bbs2600bpq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "34BB3CD5-DF01-40A8-9906-5C5B306C1B85",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:bbs2600bps:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B3CC4D7-1756-44DB-814D-57106E6826C6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:bbs2600stb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7819ABC6-800C-4141-A31F-14CBE788EF62",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:bbs2600stq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "106C758A-F23A-48B3-8360-A10212AF50E3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F08CC45-9AC9-4A00-83B9-F9D4970B0DE8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F002684-C456-40F0-AA2A-97C79AE5EECA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "796E437A-B972-4D30-B0A4-53366693C7DF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D9CC284-540E-492A-A0E6-A193DEAD3102",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "24786B0E-36AC-4DBD-8778-DC836CF81CB1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "613CDC12-2D3E-4BF3-AE2D-DCDEBEAED03D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9EADDC0-0AAE-4445-9764-1C54E3898FFD",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E09B1290-FAD0-4869-A1FA-A4D12BB602CD",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1DD69C7-9E7C-4569-9971-A06F77028BB7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DEF6206-E94C-4C16-8D91-AD776D62F79F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A47AC30-315C-4E4B-BBBB-305FA5131281",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF575955-C7E1-4DD6-8AAE-5930EDFEDA93",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B83196F-06BD-41D6-A6B8-C7ABD25CA238",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "30E49457-D38D-4145-81F2-7FA4D463CD24",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "13C6540A-C5E4-46E5-BB7C-E4C53904AE68",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D952C1D5-581F-4ADC-8DB5-3682DC8588CA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31EF6A93-7FDE-43A7-BB5D-1DD52318F60D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "98B6DF59-DF1E-4D9C-B574-37DC398B16AB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6982CB5F-4448-48D4-BD3A-782874AB2304",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B14E3D1D-B614-458D-8F78-E25CC89B311E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A08E8AD9-CA53-4F39-820E-D4A4D2D319EB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DDFAF1C-E386-4F35-8A81-492713F10A92",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:s2600wfo:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CDAD0D9-C4DD-42B5-AC7F-4C53F406B762",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F105271A-9DC1-42CE-9D19-E4A55BE1F04E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network."
    },
    {
      "lang": "es",
      "value": "Escalado de privilegios en el firmware de Intel Baseboard Management Controller (BMC) en versiones anteriores a la 1.43.91f76955 podr\u00eda permitir que un usuario sin privilegios ejecute c\u00f3digo arbitrario o realice una denegaci\u00f3n de servicio (DoS) en la red."
    }
  ],
  "id": "CVE-2018-12171",
  "lastModified": "2024-11-21T03:44:41.537",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-09-12T19:29:01.980",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.