PT-2018-1598 · Intel · Intel Baseboard Management Controller (Bmc) Firmware

Publicado 2018-09-11 · Atualizado 2019-10-03 · CVE-2018-12171

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Baseboard Management Controller (BMC) firmware versions prior to 1.43.91f76955

Description The issue is related to privilege escalation in the Intel Baseboard Management Controller (BMC) firmware, caused by privilege management errors. This may allow an unprivileged user to potentially execute arbitrary code or perform a denial of service over the network.

Recommendations For Intel Baseboard Management Controller (BMC) firmware versions prior to 1.43.91f76955, update to version 1.43.91f76955 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2018-01155

CVE-2018-12171

Produtos afetados

Intel Baseboard Management Controller (Bmc) Firmware

Referências · 5

• https://cxsecurity.com/cveshow/CVE-2018-12171 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12171 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01155 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12171 · Aviso do Fabricante