TI-2018-08717 Aliases CVE-2018-12167 GHSA-jpwq-c2vh-6pj7

Improper input validation in Intel Optane SSD DC P4800X

LOW 20CWE-20Published 2019-01-10 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.

Why it matters now

EPSS 0.00288 21st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Intel(R) Optane(TM) SSD DC P4800X	before version E2010435.	—	No fix listed	CNA

Intel(R) Optane(TM) SSD DC P4800X VendorIntel Affected before version E2010435. Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:intel:optane_ssd_dc_p4800x_firmware::::::::	before e2010435	Vulnerable	Intel
cpe:2.3:h:intel:optane_ssd_dc_p4800x:-:::::::*	not specified by NVD	Running on	Intel

cpe:2.3:o:intel:optane_ssd_dc_p4800x_firmware:*:*:*:*:*:*:*:* Versions before e2010435 Vulnerable ·Intel
cpe:2.3:h:intel:optane_ssd_dc_p4800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-12167
2026-10-03 Alias added: GHSA-jpwq-c2vh-6pj7

References

Patch 1

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html

TI-2023-12244 Improper input validation in Intel Optane SSD products CVSS 3.1HIGH 7.8
TI-2021-12669 Exposure of sensitive system information due to uncleared debug information in firmware… CVSS 3.1MEDIUM 6.8
TI-2021-12666 Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R)… CVSS 3.1MEDIUM 6.8
TI-2023-12474 Improper access control in Intel Optane SSD products CVSS 3.1MEDIUM 6.8
TI-2023-10205 Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD… CVSS 3.1MEDIUM 6.9
TI-2023-12041 Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow… CVSS 3.1MEDIUM 6.5

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences