Vulnerability in Intel Core I3
CVE-2018-12205
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
Vulnerability class: Improper Certificate Validation
EPSS: 0.003 (20.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Core_i3 — versions 8100, 8100h, 8100t
- Intel Core_i5 — versions 8200y, 8250u, 8259u
- Intel Core_i7 — versions 8086k, 8500y, 8550u
- Intel Platform_sample_firmware
- Intel Silicon_reference_firmware
- Intel Corporation Platform Sample / Silicon Reference Firmware — versions Multiple versions.
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM)
- secure@intel.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2018-12205?
- CVE-2018-12205 is a medium-severity vulnerability in Intel Core I3, classified under Improper Certificate Validation. CVSS score: 6.8/10. Published 2019-03-14.
- How severe is CVE-2018-12205?
- Medium severity. CVSS v3 base score is 6.8 out of 10.