PT-2018-11046 · Intel · Intel Server Boards+1

Published 2018-10-10 · Updated 2019-10-03 · CVE-2018-12172

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Server Board versions S7200AP, S7200APR Intel Compute Module versions HNS7200AP, HNS7200AP

Description The issue is related to improper password hashing in the firmware, which may allow a privileged user with local access to potentially disclose firmware passwords.

Recommendations For Intel Server Board versions S7200AP, S7200APR, update the firmware to a version that properly hashes passwords. For Intel Compute Module versions HNS7200AP, HNS7200AP, update the firmware to a version that properly hashes passwords.

Fix

Related Identifiers

CVE-2018-12172

Affected Products

Intel Compute Modules

Intel Server Boards

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-12172 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12172 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00138.html · Vendor Advisory