PT-2018-11046
CVE-2018-12172
·
Published
2018-10-10
·
Updated
2019-10-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Intel Server Board versions S7200AP, S7200APR
Intel Compute Module versions HNS7200AP, HNS7200AP
Description
The issue is related to improper password hashing in the firmware, which may allow a privileged user with local access to potentially disclose firmware passwords.
Recommendations
For Intel Server Board versions S7200AP, S7200APR, update the firmware to a version that properly hashes passwords.
For Intel Compute Module versions HNS7200AP, HNS7200AP, update the firmware to a version that properly hashes passwords.
Found an issue in the description? Have something to add? Feel free to write us 👾