CVE-2018-12171
First published: Wed Sep 12 2018(Updated: )
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel BMC Firmware | <1.43.91f76955 | |
| Intel BBS2600BPB | ||
| Intel BBS2600BPQR | ||
| Intel bbs2600bps | ||
| Intel BBS2600STB | ||
| Intel BBS2600STQR | ||
| Intel HNS2600BPBR | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPBLC | ||
| Intel HNS2600BPBLC24 | ||
| Intel hns2600bpq | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPS Firmware | ||
| Intel HNS2600BPS24 | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1304WF0YS | ||
| Intel r1304wftys | ||
| Intel Server System R2208WF0ZS | ||
| Intel R2208WFQZ | ||
| Intel R2208WFTZS | ||
| Intel Server System R2224WFQZS | ||
| Intel r2224wftzs | ||
| Intel R2308WFTZSR | ||
| Intel Server System R2312WF0NP | ||
| Intel R2312WFQZS | ||
| Intel R2312WFQZS | ||
| Intel S2600STB | ||
| Intel s2600stq | ||
| Intel S2600WF | ||
| Intel S2600WFQ | ||
| Intel S2600WFT |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-12171?
CVE-2018-12171 is a vulnerability in Intel Baseboard Management Controller (BMC) firmware that allows an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
How severe is the CVE-2018-12171 vulnerability?
The severity of CVE-2018-12171 is critical, with a CVSS score of 9.8.
Which software versions are affected by CVE-2018-12171?
Intel Baseboard Management Controller (BMC) firmware version up to and excluding 1.43.91f76955 is affected by CVE-2018-12171.
How can I fix CVE-2018-12171?
To fix CVE-2018-12171, upgrade the Intel Baseboard Management Controller (BMC) firmware to version 1.43.91f76955 or later.
Where can I find more information about CVE-2018-12171?
More information about CVE-2018-12171 can be found at the following link: [Intel Advisory for CVE-2018-12171](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html).
- agent/type
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel bmc firmware
- canonical/intel bbs2600bpb
- canonical/intel bbs2600bpqr
- canonical/intel bbs2600bps
- canonical/intel bbs2600stb
- canonical/intel bbs2600stqr
- canonical/intel hns2600bpbr
- canonical/intel hns2600bpb24r
- canonical/intel hns2600bpblc
- canonical/intel hns2600bpblc24
- canonical/intel hns2600bpq
- canonical/intel hns2600bpq24r
- canonical/intel hns2600bps firmware
- canonical/intel hns2600bps24
- canonical/intel server system r1208wftys
- canonical/intel server system r1304wf0ys
- canonical/intel r1304wftys
- canonical/intel server system r2208wf0zs
- canonical/intel r2208wfqz
- canonical/intel r2208wftzs
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel r2308wftzsr
- canonical/intel server system r2312wf0np
- canonical/intel r2312wfqzs
- canonical/intel s2600stb
- canonical/intel s2600stq
- canonical/intel s2600wf
- canonical/intel s2600wfq
- canonical/intel s2600wft