CVE-2018-12173
High
Description
Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
SeverityHigh
CVSS7.6
Exploit probability—
ProductIntel Server Board S2600bp Firmware
PublishedOct 10, 2018
First seenOct 10, 2018
How to fix
Update
- intel server_board_s2600bp_firmware00.01.0014 or later
- intel server_board_s2600wf_firmware00.01.0014 or later
- intel server_board_s2600st_firmware00.01.0014 or later
- intel server_board_s2600bpr_firmware00.01.0014 or later
- intel server_board_s2600wfr_firmware00.01.0014 or later
- intel server_board_s2600str_firmware00.01.0014 or later
- intel compute_module_hns2600bp_firmware00.01.0014 or later
- intel compute_module_hns2600bpr_firmware00.01.0014 or later
- intel server_system_r2000wf_firmware00.01.0014 or later
- intel server_system_r1000wf_firmware00.01.0014 or later
- intel server_system_r1000wfr_firmware00.01.0014 or later
- intel server_system_r2000wfr_firmware00.01.0014 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_board_s2600bp_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_board_s2600wf_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_board_s2600st_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_board_s2600bpr_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_board_s2600wfr_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_board_s2600str_firmware | v < 00.01.0014 | 00.01.0014 |
| intel compute_module_hns2600bp_firmware | v < 00.01.0014 | 00.01.0014 |
| intel compute_module_hns2600bpr_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_r2000wf_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_r1000wf_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_r1000wfr_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_r2000wfr_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_h2000g_firmware | v < 00.01.0014 | 00.01.0014 |
| intel server_system_h2000gr_firmware | v < 00.01.0014 | 00.01.0014 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.