5.5
MEDIUM
CVE-2018-7112
HPE Server Windows Firmware Installer Privileged Information Disclosure Vulnerability
Description

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.

INFO

Published Date :

Dec. 3, 2018, 3:29 p.m.

Last Modified :

Aug. 24, 2020, 5:37 p.m.

Remotely Exploitable :

No

Impact Score :

3.6

Exploitability Score :

1.8
Affected Products

The following products are affected by CVE-2018-7112 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Hp integrated_lights-out_4_firmware
2 Hp integrated_lights-out_3_firmware
3 Hp integrated_lights-out_2_firmware
4 Hp proliant_xl750f_gen9_server_firmware
5 Hp proliant_xl740f_gen9_server_firmware
6 Hp proliant_xl730f_gen9_server_firmware
7 Hp proliant_xl450_gen9_server_firmware
8 Hp proliant_xl270d_gen9_server_firmware
9 Hp proliant_xl270d_gen9_accelerator_tray_firmware
10 Hp proliant_xl260a_gen9_server_firmware
11 Hp proliant_xl250a_gen9_server_firmware
12 Hp proliant_xl230a_gen9_server_firmware
13 Hp proliant_xl190r_gen9_server_firmware
14 Hp proliant_xl170r_gen9_server_firmware
15 Hp proliant_dl560_gen9_server_firmware
16 Hp proliant_dl380_gen9_server_firmware
17 Hp proliant_dl360_gen9_server_firmware
18 Hp proliant_dl180_gen9_server_firmware
19 Hp proliant_dl160_gen9_server_firmware
20 Hp proliant_dl120_gen9_server_firmware
21 Hp proliant_dl80_gen9_server_firmware
22 Hp proliant_dl60_gen9_server_firmware
23 Hp proliant_dl20_gen9_server_firmware
24 Hp proliant_ml350_gen9_server_firmware
25 Hp proliant_ml150_gen9_server_firmware
26 Hp proliant_ml110_gen9_server_firmware
27 Hp proliant_ml30_gen9_server_firmware
28 Hp proliant_ml10_gen9_server_firmware
29 Hp proliant_bl660c_gen9_server_firmware
30 Hp proliant_bl460c_gen9_server_blade_firmware
31 Hp proliant_ws460c_gen9_workstation_firmware
32 Hp proliant_dl380e_gen8_server_firmware
33 Hp proliant_dl360p_gen8_server_firmware
34 Hp proliant_dl360e_gen8_server_firmware
35 Hp proliant_dl320e_gen8_server_firmware
36 Hp proliant_dl320e_gen8_v2_server_firmware
37 Hp proliant_dl160_gen8_server_firmware
38 Hp proliant_sl250s_gen8_server_firmware
39 Hp proliant_sl210t_gen8_server_firmware
40 Hp proliant_bl660c_gen8_server_blade_firmware
41 Hp proliant_bl465c_gen8_\(amd\)_firmware
42 Hp proliant_bl460c_gen8_server_blade_firmware
43 Hp proliant_bl420c_gen8_server_firmware
44 Hp proliant_sl4540_gen8_1_node_server_firmware
45 Hp proliant_sl270s_gen8_server_firmware
46 Hp proliant_dl580_gen8_server_firmware
47 Hp proliant_dl560_gen8_server_firmware
48 Hp proliant_dl380p_gen8_server_firmware
49 Hp proliant_dl385p_gen8_\(amd\)_firmware
50 Hp proliant_ml350e_gen8_v2_server_firmware
51 Hp proliant_ml350e_gen8_server_firmware
52 Hp proliant_ml350p_gen8_server_firmware
53 Hp proliant_ml310e_gen8_v2_server_firmware
54 Hp proliant_ml310e_gen8_server_firmware
55 Hp proliant_microserver_gen8_firmware
56 Hp proliant_m710_server_cartridge_firmware
57 Hp proliant_m710p_server_cartridge_firmware
58 Hp proliant_m710x_server_cartridge_firmware
59 Hp proliant_m510_server_cartridge_firmware
60 Hp proliant_m350_server_cartridge_firmware
61 Hp proliant_m300_server_cartridge_firmware
62 Hp proliant_bl2x220c_g7_server_blade_firmware
63 Hp proliant_dl585_g7_server_\(amd\)_firmware
64 Hp proliant_dl980_g7_server_firmware
65 Hp proliant_dl580_g7_server_firmware
66 Hp proliant_dl385_g7_server_firmware
67 Hp proliant_dl380_g7_server_firmware
68 Hp proliant_dl120_g7_server_firmware
69 Hp proliant_dl360_g7_server_firmware
70 Hp proliant_bl685c_g7_server_blade_\(amd\)_firmware
71 Hp proliant_bl680c_g7_server_blade_firmware
72 Hp proliant_bl620c_g7_server_blade_firmware
73 Hp proliant_bl490c_g7_server_blade_firmware
74 Hp proliant_bl465c_g7_server_blade_firmware
75 Hp proliant_bl460c_g7_server_blade_firmware
76 Hp proliant_sl390s_g7_server_firmware
77 Hp proliant_ml110_g7_server_firmware
78 Hp proliant_ml10_v2_server_firmware
79 Hp proliant_sl4545_g7_server_\(amd\)_firmware
80 Hp proliant_thin_micro_tm200_server_firmware
81 Hp proliant_dl380_g6_server_firmware
82 Hp proliant_dl370_g6_server_firmware
83 Hp proliant_dl360_g6_server_firmware
84 Hp proliant_dl320_g6_server_firmware
85 Hp proliant_dl180_g6_server_firmware
86 Hp proliant_dl170h_g6_server_firmware
87 Hp proliant_dl170e_g6_server_firmware
88 Hp proliant_dl160_g6_server_firmware
89 Hp proliant_dl120_g6_server_firmware
90 Hp proliant_ml370_g6_server_firmware
91 Hp proliant_ml350_g6_server_firmware
92 Hp proliant_ml330_g6_server_firmware
93 Hp proliant_ml150_g6_server_firmware
94 Hp proliant_ml110_g6_server_firmware
95 Hp proliant_sl2x170z_g6_server_firmware
96 Hp proliant_bl490c_g6_server_blade_firmware
97 Hp proliant_bl460c_g6_server_blade_firmware
98 Hp proliant_sl170z_g6_server_firmware
99 Hp proliant_sl160s_g6_server_firmware
100 Hp proliant_bl2x220c_g6_server_blade_firmware
101 Hp proliant_bl280c_g6_server_bladefirmware
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2018-7112.

URL Resource
http://www.securitytracker.com/id/1041984 Third Party Advisory VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us Not Applicable Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us Not Applicable Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us Not Applicable Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-7112 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2018-7112 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CWE Remap by [email protected]

    Aug. 24, 2020

    Action Type Old Value New Value
    Changed CWE CWE-200 NVD-CWE-noinfo
  • Initial Analysis by [email protected]

    Feb. 04, 2019

    Action Type Old Value New Value
    Added CVSS V2 (AV:L/AC:L/Au:N/C:C/I:N/A:N)
    Added CVSS V3 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us Not Applicable, Vendor Advisory
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us Not Applicable, Vendor Advisory
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us Not Applicable, Vendor Advisory
    Changed Reference Type http://www.securitytracker.com/id/1041984 No Types Assigned http://www.securitytracker.com/id/1041984 Third Party Advisory, VDB Entry
    Changed Reference Type https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us No Types Assigned https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us Vendor Advisory
    Added CWE CWE-200
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_2_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.33 OR cpe:2.3:h:hp:integrated_lights-out_2:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.90 OR cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:integrated_lights-out_4_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.60 OR cpe:2.3:h:hp:integrated_lights-out:-:*:*:*:*:*:*:* cpe:2.3:h:hp:proliant_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl750f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl750f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl740f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl740f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl730f_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl730f_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl450_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl450_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl270d_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl270d_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl270d_gen9_accelerator_tray_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl270d_gen9_accelerator_tray:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl260a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.60_01-22-2018 OR cpe:2.3:h:hp:proliant_xl260a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl250a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl250a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl230a_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl230a_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl190r_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl190r_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_xl170r_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_xl170r_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl560_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl560_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl380_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl360_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl180_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl180_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl160_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl120_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl80_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl80_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl60_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl60_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl20_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_dl20_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml350_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml150_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml150_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml110_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml30_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ml30_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml10_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml10_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl660c_gen9_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_bl660c_gen9_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_gen9_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_bl460c_gen9_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ws460c_gen9_workstation_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_ws460c_gen9_workstation:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl380e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl360p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl360e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl320e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl320e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl160_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl250s_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl250s_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl210t_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl210t_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl660c_gen8_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl660c_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl465c_gen8_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl465c_gen8_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_gen8_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl460c_gen8_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl420c_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_bl420c_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl4540_gen8_1_node_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl4540_gen8_1_node_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl270s_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_sl270s_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl580_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.00_02-22-2018 OR cpe:2.3:h:hp:proliant_dl580_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl560_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl560_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_dl380p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl385p_gen8_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl385p_gen8_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350p_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml350p_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml310e_gen8_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml310e_gen8_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml310e_gen8_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml310e_gen8_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_microserver_gen8_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_microserver_gen8:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m710_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710p_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m710p_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m710x_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.64_01-22-2018 OR cpe:2.3:h:hp:proliant_m710x_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m510_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.64_01-22-2018 OR cpe:2.3:h:hp:proliant_m510_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m350_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m350_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_m300_server_cartridge_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_m300_server_cartridge:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl2x220c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl2x220c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl585_g7_server_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl585_g7_server_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl980_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl980_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl580_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl580_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl385_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_dl385_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_g7_server_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl380_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl120_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl360_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl685c_g7_server_blade_\(amd\)_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl685c_g7_server_blade_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl680c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl680c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl620c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl620c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl490c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl490c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl465c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.03.14 OR cpe:2.3:h:hp:proliant_bl465c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_g7_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl460c_g7_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl390s_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_sl390s_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_g7_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml110_g7_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml10_v2_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.01.22 OR cpe:2.3:h:hp:proliant_ml10_v2_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl4545_g7_server_\(amd\)_firmware:2018.03.14\(a\):*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl4545_g7_server_\(amd\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_thin_micro_tm200_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.56_01-22-2018 OR cpe:2.3:h:hp:proliant_thin_micro_tm200_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl380_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl380_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl370_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl370_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl360_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl360_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl320_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_dl320_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl180_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl180_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl170h_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl170h_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl170e_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl170e_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl160_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl160_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_dl120_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_dl120_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml370_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml370_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml350_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml350_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml330_g6_server_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_ml330_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml150_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_ml150_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_ml110_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_ml110_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl2x170z_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl2x170z_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl490c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl490c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl460c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl460c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl170z_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl170z_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_sl160s_g6_server_firmware:*:*:*:*:*:*:*:* OR cpe:2.3:h:hp:proliant_sl160s_g6_server:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl2x220c_g6_server_blade_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl2x220c_g6_server_blade:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:proliant_bl280c_g6_server_bladefirmware:*:*:*:*:*:*:*:* versions up to (excluding) 2018.05.21 OR cpe:2.3:h:hp:proliant_bl280c_g6_server:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Dec. 04, 2018

    Action Type Old Value New Value
    Added Reference http://www.securitytracker.com/id/1041984 [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2018-7112 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2018-7112 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.05635

percentile

CVSS30 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability