Intel Silicon Reference Firmware vulnerabilities

5 CVEs affecting Intel Silicon Reference Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-12205, published 2019-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-12201, published 2019-03-14. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005…
CVE-2018-12203, published 2019-03-14. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially…
CVE-2018-12204, published 2019-03-14. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable…
CVE-2018-12202, published 2019-03-14. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to…
CVE-2018-12205, published 2019-03-14. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated…