5.5
MEDIUM
CVE-2018-7112
HPE Server Windows Firmware Installer Privileged Information Disclosure Vulnerability
Description

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.

INFO

Published Date :

Dec. 3, 2018, 3:29 p.m.

Last Modified :

Nov. 21, 2024, 4:11 a.m.

Remotely Exploitable :

No

Impact Score :

3.6

Exploitability Score :

1.8
Affected Products

The following products are affected by CVE-2018-7112 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Hp integrated_lights-out_4_firmware
2 Hp integrated_lights-out_3_firmware
3 Hp integrated_lights-out_2_firmware
4 Hp proliant_xl750f_gen9_server_firmware
5 Hp proliant_xl740f_gen9_server_firmware
6 Hp proliant_xl730f_gen9_server_firmware
7 Hp proliant_xl450_gen9_server_firmware
8 Hp proliant_xl270d_gen9_server_firmware
9 Hp proliant_xl270d_gen9_accelerator_tray_firmware
10 Hp proliant_xl260a_gen9_server_firmware
11 Hp proliant_xl250a_gen9_server_firmware
12 Hp proliant_xl230a_gen9_server_firmware
13 Hp proliant_xl190r_gen9_server_firmware
14 Hp proliant_xl170r_gen9_server_firmware
15 Hp proliant_dl560_gen9_server_firmware
16 Hp proliant_dl380_gen9_server_firmware
17 Hp proliant_dl360_gen9_server_firmware
18 Hp proliant_dl180_gen9_server_firmware
19 Hp proliant_dl160_gen9_server_firmware
20 Hp proliant_dl120_gen9_server_firmware
21 Hp proliant_dl80_gen9_server_firmware
22 Hp proliant_dl60_gen9_server_firmware
23 Hp proliant_dl20_gen9_server_firmware
24 Hp proliant_ml350_gen9_server_firmware
25 Hp proliant_ml150_gen9_server_firmware
26 Hp proliant_ml110_gen9_server_firmware
27 Hp proliant_ml30_gen9_server_firmware
28 Hp proliant_ml10_gen9_server_firmware
29 Hp proliant_bl660c_gen9_server_firmware
30 Hp proliant_bl460c_gen9_server_blade_firmware
31 Hp proliant_ws460c_gen9_workstation_firmware
32 Hp proliant_dl380e_gen8_server_firmware
33 Hp proliant_dl360p_gen8_server_firmware
34 Hp proliant_dl360e_gen8_server_firmware
35 Hp proliant_dl320e_gen8_server_firmware
36 Hp proliant_dl320e_gen8_v2_server_firmware
37 Hp proliant_dl160_gen8_server_firmware
38 Hp proliant_sl250s_gen8_server_firmware
39 Hp proliant_sl210t_gen8_server_firmware
40 Hp proliant_bl660c_gen8_server_blade_firmware
41 Hp proliant_bl465c_gen8_\(amd\)_firmware
42 Hp proliant_bl460c_gen8_server_blade_firmware
43 Hp proliant_bl420c_gen8_server_firmware
44 Hp proliant_sl4540_gen8_1_node_server_firmware
45 Hp proliant_sl270s_gen8_server_firmware
46 Hp proliant_dl580_gen8_server_firmware
47 Hp proliant_dl560_gen8_server_firmware
48 Hp proliant_dl380p_gen8_server_firmware
49 Hp proliant_dl385p_gen8_\(amd\)_firmware
50 Hp proliant_ml350e_gen8_v2_server_firmware
51 Hp proliant_ml350e_gen8_server_firmware
52 Hp proliant_ml350p_gen8_server_firmware
53 Hp proliant_ml310e_gen8_v2_server_firmware
54 Hp proliant_ml310e_gen8_server_firmware
55 Hp proliant_microserver_gen8_firmware
56 Hp proliant_m710_server_cartridge_firmware
57 Hp proliant_m710p_server_cartridge_firmware
58 Hp proliant_m710x_server_cartridge_firmware
59 Hp proliant_m510_server_cartridge_firmware
60 Hp proliant_m350_server_cartridge_firmware
61 Hp proliant_m300_server_cartridge_firmware
62 Hp proliant_bl2x220c_g7_server_blade_firmware
63 Hp proliant_dl585_g7_server_\(amd\)_firmware
64 Hp proliant_dl980_g7_server_firmware
65 Hp proliant_dl580_g7_server_firmware
66 Hp proliant_dl385_g7_server_firmware
67 Hp proliant_dl380_g7_server_firmware
68 Hp proliant_dl120_g7_server_firmware
69 Hp proliant_dl360_g7_server_firmware
70 Hp proliant_bl685c_g7_server_blade_\(amd\)_firmware
71 Hp proliant_bl680c_g7_server_blade_firmware
72 Hp proliant_bl620c_g7_server_blade_firmware
73 Hp proliant_bl490c_g7_server_blade_firmware
74 Hp proliant_bl465c_g7_server_blade_firmware
75 Hp proliant_bl460c_g7_server_blade_firmware
76 Hp proliant_sl390s_g7_server_firmware
77 Hp proliant_ml110_g7_server_firmware
78 Hp proliant_ml10_v2_server_firmware
79 Hp proliant_sl4545_g7_server_\(amd\)_firmware
80 Hp proliant_thin_micro_tm200_server_firmware
81 Hp proliant_dl380_g6_server_firmware
82 Hp proliant_dl370_g6_server_firmware
83 Hp proliant_dl360_g6_server_firmware
84 Hp proliant_dl320_g6_server_firmware
85 Hp proliant_dl180_g6_server_firmware
86 Hp proliant_dl170h_g6_server_firmware
87 Hp proliant_dl170e_g6_server_firmware
88 Hp proliant_dl160_g6_server_firmware
89 Hp proliant_dl120_g6_server_firmware
90 Hp proliant_ml370_g6_server_firmware
91 Hp proliant_ml350_g6_server_firmware
92 Hp proliant_ml330_g6_server_firmware
93 Hp proliant_ml150_g6_server_firmware
94 Hp proliant_ml110_g6_server_firmware
95 Hp proliant_sl2x170z_g6_server_firmware
96 Hp proliant_bl490c_g6_server_blade_firmware
97 Hp proliant_bl460c_g6_server_blade_firmware
98 Hp proliant_sl170z_g6_server_firmware
99 Hp proliant_sl160s_g6_server_firmware
100 Hp proliant_bl2x220c_g6_server_blade_firmware
101 Hp proliant_bl280c_g6_server_bladefirmware
102 Hp integrated_lights-out
103 Hp integrated_lights-out_2
104 Hp proliant_gen6_server
105 Hp proliant_gen7_server
106 Hp proliant_gen8_server
107 Hp proliant_xl750f_gen9_server
108 Hp proliant_xl740f_gen9_server
109 Hp proliant_xl730f_gen9_server
110 Hp proliant_xl450_gen9_server
111 Hp proliant_xl270d_gen9_server
112 Hp proliant_xl270d_gen9_accelerator_tray
113 Hp proliant_xl260a_gen9_server
114 Hp proliant_xl250a_gen9_server
115 Hp proliant_xl230a_gen9_server
116 Hp proliant_xl190r_gen9_server
117 Hp proliant_xl170r_gen9_server
118 Hp proliant_dl560_gen9_server
119 Hp proliant_dl380_gen9_server
120 Hp proliant_dl360_gen9_server
121 Hp proliant_dl180_gen9_server
122 Hp proliant_dl160_gen9_server
123 Hp proliant_dl120_gen9_server
124 Hp proliant_dl80_gen9_server
125 Hp proliant_dl60_gen9_server
126 Hp proliant_dl20_gen9_server
127 Hp proliant_ml350_gen9_server
128 Hp proliant_ml150_gen9_server
129 Hp proliant_ml110_gen9_server
130 Hp proliant_ml30_gen9_server
131 Hp proliant_ml10_gen9_server
132 Hp proliant_bl660c_gen9_server
133 Hp proliant_bl460c_gen9_server_blade
134 Hp proliant_ws460c_gen9_workstation
135 Hp proliant_dl380e_gen8_server
136 Hp proliant_dl360p_gen8_server
137 Hp proliant_dl360e_gen8_server
138 Hp proliant_dl320e_gen8_server
139 Hp proliant_dl320e_gen8_v2_server
140 Hp proliant_dl160_gen8_server
141 Hp proliant_sl250s_gen8_server
142 Hp proliant_sl210t_gen8_server
143 Hp proliant_bl660c_gen8_server
144 Hp proliant_bl465c_gen8_\(amd\)
145 Hp proliant_bl460c_gen8_server_blade
146 Hp proliant_bl420c_gen8_server
147 Hp proliant_sl4540_gen8_1_node_server
148 Hp proliant_sl270s_gen8_server
149 Hp proliant_dl580_gen8_server
150 Hp proliant_dl560_gen8_server
151 Hp proliant_dl380p_gen8_server
152 Hp proliant_dl385p_gen8_\(amd\)
153 Hp proliant_ml350e_gen8_v2_server
154 Hp proliant_ml350e_gen8_server
155 Hp proliant_ml350p_gen8_server
156 Hp proliant_ml310e_gen8_v2_server
157 Hp proliant_ml310e_gen8_server
158 Hp proliant_microserver_gen8
159 Hp proliant_m710_server_cartridge
160 Hp proliant_m710p_server_cartridge
161 Hp proliant_m710x_server_cartridge
162 Hp proliant_m510_server_cartridge
163 Hp proliant_m350_server_cartridge
164 Hp proliant_m300_server_cartridge
165 Hp proliant_bl2x220c_g7_server_blade
166 Hp proliant_dl585_g7_server_\(amd\)
167 Hp proliant_dl980_g7_server
168 Hp proliant_dl580_g7_server
169 Hp proliant_dl385_g7_server
170 Hp proliant_dl380_g7_server
171 Hp proliant_dl120_g7_server
172 Hp proliant_dl360_g7_server
173 Hp proliant_bl685c_g7_server_blade_\(amd\)
174 Hp proliant_bl680c_g7_server_blade
175 Hp proliant_bl620c_g7_server_blade
176 Hp proliant_bl490c_g7_server_blade
177 Hp proliant_bl465c_g7_server_blade
178 Hp proliant_bl460c_g7_server_blade
179 Hp proliant_sl390s_g7_server
180 Hp proliant_ml110_g7_server
181 Hp proliant_ml10_v2_server
182 Hp proliant_sl4545_g7_server_\(amd\)
183 Hp proliant_thin_micro_tm200_server
184 Hp proliant_dl380_g6_server
185 Hp proliant_dl370_g6_server
186 Hp proliant_dl360_g6_server
187 Hp proliant_dl320_g6_server
188 Hp proliant_dl180_g6_server
189 Hp proliant_dl170h_g6_server
190 Hp proliant_dl170e_g6_server
191 Hp proliant_dl160_g6_server
192 Hp proliant_dl120_g6_server
193 Hp proliant_ml370_g6_server
194 Hp proliant_ml350_g6_server
195 Hp proliant_ml330_g6_server
196 Hp proliant_ml150_g6_server
197 Hp proliant_ml110_g6_server
198 Hp proliant_sl2x170z_g6_server
199 Hp proliant_bl490c_g6_server_blade
200 Hp proliant_bl460c_g6_server_blade
201 Hp proliant_sl170z_g6_server
202 Hp proliant_sl160s_g6_server
203 Hp proliant_bl2x220c_g6_server_blade
204 Hp proliant_bl280c_g6_server

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-7112 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2018-7112 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CWE Remap by [email protected]

    Aug. 24, 2020

    Action Type Old Value New Value
    Changed CWE CWE-200 NVD-CWE-noinfo
  • Initial Analysis by [email protected]

    Feb. 04, 2019

    Action Type Old Value New Value
    Added CVSS V2 (AV:L/AC:L/Au:N/C:C/I:N/A:N)
    Added CVSS V3 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us Not Applicable, Vendor Advisory
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us Not Applicable, Vendor Advisory
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us Not Applicable, Vendor Advisory
    Changed Reference Type http://www.securitytracker.com/id/1041984 No Types Assigned http://www.securitytracker.com/id/1041984 Third Party Advisory, VDB Entry
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us Vendor Advisory
    Added CWE CWE-200
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.33 OR cpe:2.3:h:hp:integrated_lights-out_2:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.90 OR cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.60 OR cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl750f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl740f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl730f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl450_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl270d_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl270d_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl270d_gen9_accelerator_tray_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl270d_gen9_accelerator_tray:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl260a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.60_01-22-2018 OR cpe:2.3:h:hp:proliant_xl260a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl250a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl230a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl190r_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl170r_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl560_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl180_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl80_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl60_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl20_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml150_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml150_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml30_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml10_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml10_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl660c_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_gen9_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ws460c_gen9_workstation_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ws460c_gen9_workstation:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl250s_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl210t_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl660c_gen8_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl660c_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl465c_gen8_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl465c_gen8_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_gen8_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl420c_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl4540_gen8_1_node_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl4540_gen8_1_node_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl270s_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl580_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.00_02-22-2018 OR cpe:2.3:h:hp:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl560_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl385p_gen8_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml310e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml310e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_microserver_gen8_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_microserver_gen8:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m710_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710p_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m710p_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710x_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.64_01-22-2018 OR cpe:2.3:h:hp:proliant_m710x_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m510_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.64_01-22-2018 OR cpe:2.3:h:hp:proliant_m510_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m350_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m350_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m300_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m300_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl2x220c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl2x220c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl585_g7_server_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl585_g7_server_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl980_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl980_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl580_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl580_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl385_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl385_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_g7_server_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl380_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl120_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl360_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl685c_g7_server_blade_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl685c_g7_server_blade_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl680c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl680c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl620c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl620c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl490c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl490c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl465c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl465c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl460c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl390s_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_sl390s_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml110_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml10_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml10_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl4545_g7_server_\(amd\)_firmware:2018.03.14\(a\):*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl4545_g7_server_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_thin_micro_tm200_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_thin_micro_tm200_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl380_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl370_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl370_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl360_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl320_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl180_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl180_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl170h_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl170h_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl170e_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl170e_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl160_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl120_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml370_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml370_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml350_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml330_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml330_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml150_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_ml150_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_ml110_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl2x170z_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl2x170z_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl490c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl490c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl460c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl170z_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl170z_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl160s_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl160s_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl2x220c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl2x220c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl280c_g6_server_bladefirmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl280c_g6_server:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Dec. 04, 2018

    Action Type Old Value New Value
    Added Reference http://www.securitytracker.com/id/1041984 [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2018-7112 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2018-7112 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.05635

percentile

CVSS30 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability