CVE-2018-12172

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a privileged user to potentially disclose firmware passwords via local access.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Oct 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121737.6Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01 CVE-2018-121747.8Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate CVE-2018-121757.8Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privile CVE-2018-121768.2Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in info CVE-2018-121777.8Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut CVE-2018-121789.1Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of servi CVE-2018-121797.8Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, informati CVE-2018-12187.5In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes CVE-2018-121808.8Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information d CVE-2018-121816.0Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via CVE-2018-121826.7Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, inf CVE-2018-121836.8Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure