PT-2019-1629 · Intel · Intel Server Platform Services

Publicado 2019-03-12 · Atualizado 2019-04-04 · CVE-2018-12198

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Server Platform Services versions prior to SPS E5 04.00.04.393.0

Description The issue is related to insufficient input validation in the HECI subsystem of Intel Server Platform Services, which may allow a privileged user to cause a denial of service via local access. This could potentially be exploited by an attacker to disrupt service.

Recommendations For versions prior to SPS E5 04.00.04.393.0, update to version SPS E5 04.00.04.393.0 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-01176

CVE-2018-12198

Produtos afetados

Intel Server Platform Services

Referências · 7

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us · Nota
• https://osv.dev/vulnerability/CVE-2018-12198 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01176 · Nota de Segurança
• https://security.netapp.com/advisory/ntap-20190318-0001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12198 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00185.html · Nota
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html · Aviso do Fabricante