VULNERABILITY INTELLIGENCE
CVE-2018-12205
CVSS score6.8 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2019-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
Weakness classification
- CWE-295: Improper Certificate Validation