PT-2018-11046 · Intel · Intel Server Boards+1

Publicado 2018-10-10 · Atualizado 2019-10-03 · CVE-2018-12172

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Server Board versions S7200AP, S7200APR Intel Compute Module versions HNS7200AP, HNS7200AP

Description The issue is related to improper password hashing in the firmware, which may allow a privileged user with local access to potentially disclose firmware passwords.

Recommendations For Intel Server Board versions S7200AP, S7200APR, update the firmware to a version that properly hashes passwords. For Intel Compute Module versions HNS7200AP, HNS7200AP, update the firmware to a version that properly hashes passwords.

Correção

Identificadores relacionados

CVE-2018-12172

Produtos afetados

Intel Compute Modules

Intel Server Boards

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-12172 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12172 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00138.html · Aviso do Fabricante