CVE-2018-12171

Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
intelbmc_firmware
𝑥
< 1.43.91f76955
𝑥
= Vulnerable software versions
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html