Sign-up

ID

VAR-201901-0456


CVE

CVE-2018-12166


TITLE

Intel(R) Optane(TM) SSD DC P4800X Input validation vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-014118

DESCRIPTION

Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access. Intel(R) Optane(TM) SSD DC P4800X Contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. IntelOptaneSSDDCP4800X is a solid state drive from Intel Corporation of the United States. A security vulnerability exists in the firmware in previous versions of IntelOptaneSSDDCP4800XE2010435 due to a program failing to write protect. A local attacker can exploit this vulnerability to cause a denial of service

Trust: 2.16

sources: NVD: CVE-2018-12166 // JVNDB: JVNDB-2018-014118 // CNVD: CNVD-2019-02513

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2019-02513

AFFECTED PRODUCTS

vendor:intelmodel:optane ssd dc p4800xscope:ltversion:e2010435

Trust: 1.8

vendor:intelmodel:optane ssd dc p4800x <e2010435scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2019-02513 // JVNDB: JVNDB-2018-014118 // NVD: CVE-2018-12166

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-12166
value: MEDIUM

Trust: 1.0

NVD: CVE-2018-12166
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2019-02513
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201901-338
value: LOW

Trust: 0.6

nvd@nist.gov: CVE-2018-12166
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2019-02513
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2018-12166
baseSeverity: MEDIUM
baseScore: 4.4
vectorString: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 0.8
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2019-02513 // JVNDB: JVNDB-2018-014118 // CNNVD: CNNVD-201901-338 // NVD: CVE-2018-12166

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2018-014118 // NVD: CVE-2018-12166

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201901-338

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201901-338

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-014118

PATCH
title:INTEL-SA-00175url:https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html
Trust: 0.8
title:IntelOptaneSSDDCP4800X denial of service vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/151153
Trust: 0.6
title:Intel Optane SSD DC P4800X Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=88513
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2019-02513 // 
            
            
            
            JVNDB: JVNDB-2018-014118 // 
            
            
            
            CNNVD: CNNVD-201901-338

EXTERNAL IDS
db:NVDid:CVE-2018-12166
Trust: 3.0
db:JVNDBid:JVNDB-2018-014118
Trust: 0.8
db:CNVDid:CNVD-2019-02513
Trust: 0.6
db:CNNVDid:CNNVD-201901-338
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2019-02513 // 
            
            
            
            JVNDB: JVNDB-2018-014118 // 
            
            
            
            CNNVD: CNNVD-201901-338 // 
            
            
            
            NVD: CVE-2018-12166

REFERENCES
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00175.html
Trust: 2.2
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-12166
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-12166
Trust: 0.8
sources:
            
            
            CNVD: CNVD-2019-02513 // 
            
            
            
            JVNDB: JVNDB-2018-014118 // 
            
            
            
            CNNVD: CNNVD-201901-338 // 
            
            
            
            NVD: CVE-2018-12166

SOURCES
db:CNVDid:CNVD-2019-02513
db:JVNDBid:JVNDB-2018-014118
db:CNNVDid:CNNVD-201901-338
db:NVDid:CVE-2018-12166

LAST UPDATE DATE
2024-11-23T22:41:37.862000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2019-02513date:2019-01-23T00:00:00
db:JVNDBid:JVNDB-2018-014118date:2019-03-12T00:00:00
db:CNNVDid:CNNVD-201901-338date:2019-02-11T00:00:00
db:NVDid:CVE-2018-12166date:2024-11-21T03:44:41.063

SOURCES RELEASE DATE
db:CNVDid:CNVD-2019-02513date:2019-01-23T00:00:00
db:JVNDBid:JVNDB-2018-014118date:2019-03-12T00:00:00
db:CNNVDid:CNNVD-201901-338date:2019-01-11T00:00:00
db:NVDid:CVE-2018-12166date:2019-01-10T20:29:00.300