Improper Firmware Configuration in EDK II by Intel
CVE-2018-12179
7.8HIGH
Key Information:
- Vendor
- CVE Published:
- 27 March 2019
What is CVE-2018-12179?
The vulnerability stems from improper configuration in the system firmware associated with EDK II, which can potentially allow unauthenticated users to exploit local access. This could lead to privilege escalation, information disclosure, or even a denial of service. Such security gaps emphasize the importance of securing firmware configurations and ensuring only authorized access is granted to sensitive system components.
Affected Version(s)
Extensible Firmware Interface Development Kit (EDK II)