{"id":"CVE-2018-12173","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-12173","generatedAt":"2026-10-29T01:54:43.269Z","title":"Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information…","description":"Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.","published":"2018-10-10T18:29:04.000Z","lastModified":"2026-06-17T01:37:16.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.0","score":7.6,"severity":"HIGH","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-732"],"affected":["intel/server board s2600bp firmware","intel/server board s2600wf firmware","intel/server board s2600st firmware","intel/server board s2600bpr firmware","intel/server board s2600wfr firmware","intel/server board s2600str firmware","intel/compute module hns2600bp firmware","intel/compute module hns2600bpr firmware","intel/server system r2000wf firmware","intel/server system r1000wf firmware","intel/server system r1000wfr firmware","intel/server system r2000wfr firmware","intel/server system h2000g firmware","intel/server system h2000gr firmware"],"epss":{"score":0.00407,"percentile":0.34824,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://support.lenovo.com/us/en/solutions/LEN-24799","source":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00179.html","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"http://support.lenovo.com/us/en/solutions/LEN-24799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00179.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-12173","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}