CVE-2018-12131

HIGH 7.8CVE-2018-12131 · Published 10/10/2018 · updated 17/06/2026

In short

CVE-2018-12131 is a HIGH (CVSS 7.8) vulnerability affecting client nvme (intel), datacenter nvme (intel), rapid storage technology (intel).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.2% of all vulnerabilities.
Fix: update to 4.0.0.1007, 4.7.0.2083 or later.

Package	Affected versions	Patched versions
client nvme intel	`< 4.0.0.1007`	`4.0.0.1007`
datacenter nvme intel	`≤ 4.0.0.1006`	No fix yet
rapid storage technology intel	`< 4.7.0.2083`	`4.7.0.2083`

Description

Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00154.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free