← Vulnerability feed

Vulnerability record · CVE-2018-12198 · published 14 March 2019

CVE-2018-12198: Intel server platform services firmware improper input validation vulnerability

Intel · Server Platform Services Firmware

Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.

6.0 CVSS 3.0 Medium EPSS 0.34% · top 75.0% CWE-20 · Improper input validation
6.0CVSS 3.0 base score, v2 2.1
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://security.netapp.com/advisory/ntap-20190318-0001/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20190318-0001/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html Vendor Advisory

Track CVE-2018-12198 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2018-3643Intel converged security management engine firmware vulnerabilityA vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before ver…EPSS 0.48%7.8CVE-2017-5709Intel server platform services firmware vulnerabilityMultiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via …EPSS 0.58%7.8CVE-2017-5706Intel server platform services firmware memory buffer overflow vulnerabilityMultiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrar…EPSS 0.69%7.6CVE-2018-12208Intel converged security management engine firmware memory buffer overflow vulnerabilityBuffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4…EPSS 0.51%7.6CVE-2018-12191Intel converged security management engine firmware memory buffer overflow vulnerabilityBounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before ver…EPSS 0.48%7.3CVE-2018-3655Intel converged security management engine firmware vulnerabilityA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution E…EPSS 0.46%6.8CVE-2019-0099Intel server platform services firmware vulnerabilityInsufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to pote…EPSS 0.40%6.8CVE-2018-12192Intel converged security management engine firmware improper authentication vulnerabilityLogic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versio…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2018-12198), CISA KEV, FIRST EPSS (scores of 2026-10-01). This page is refreshed as NVD updates the record.