CVE-2018-12166

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.

Metrics

CVSS 3.0 4.4/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jan 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121674.4Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potential CVE-2018-121687.8Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user t CVE-2018-121697.6Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Process CVE-2018-12179.8Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1 CVE-2018-121719.8Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to CVE-2018-121725.5Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a p CVE-2018-121737.6Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01 CVE-2018-121747.8Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate CVE-2018-121757.8Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privile CVE-2018-121768.2Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in info CVE-2018-121777.8Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut CVE-2018-121789.1Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of servi