CVSS: 7.2EPSS: 0%CPEs: 140EXPL: 0CVE-2018-12204
https://notcve.org/view.php?id=CVE-2018-12204
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access. La inicialización inadecuada en Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module) puede permitir que el usuario privilegiado habilite potencialmente una escalada de privilegios a través del acceso local. • https://security.netapp.com/advisory/ntap-20190318-0002 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03929en_us https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html • CWE-665: Improper Initialization •
CVSS: 9.8EPSS: 0%CPEs: 31EXPL: 0CVE-2018-12171
https://notcve.org/view.php?id=CVE-2018-12171
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. Escalado de privilegios en el firmware de Intel Baseboard Management Controller (BMC) en versiones anteriores a la 1.43.91f76955 podría permitir que un usuario sin privilegios ejecute código arbitrario o realice una denegación de servicio (DoS) en la red. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html •
CVSS: 8.2EPSS: 0%CPEs: 70EXPL: 0CVE-2018-3682
https://notcve.org/view.php?id=CVE-2018-3682
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS. El firmware BMC en las placas para servidores, los módulos de computación y los sistemas Intel podrían permitir que un atacante con privilegios administrativos realice lecturas/escrituras no autorizadas al SMBUS. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00130.html • CWE-269: Improper Privilege Management •