[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGxi4GhAbwapD3jYVCIpF1RtHcvv_bAQBSS7GYDULhOM":3,"g5a-risk:CVE-2018-12180":146},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":90,"weaknesses":91,"weaknessesCount":100,"isActivelyExploited":101,"cisaInfo":15,"otxData":15,"relatedBlogPosts":102,"seoMetadata":103,"configurations":128,"relatedVendorCves":142,"notableEvents":143},"CVE-2018-12180","What is CVE-2018-12180?","Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and\u002For denial of service via network access.","Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and\u002For ...","2019-03-27T20:29:03.457","2023-11-07T02:52:08.257",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02255,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"tianocore","edk_ii","-","cpe:2.3:a:tianocore:edk_ii:-:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"opensuse","leap","15.0","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",2,[56,62,66,69,72,78,82,86],{"url":57,"source":58,"tags":59},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-03\u002Fmsg00046.html","Opensuse",[60,61],"Mailing List","Third Party Advisory",{"url":63,"source":64,"tags":65},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0809","Red Hat",[],{"url":67,"source":64,"tags":68},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0968",[],{"url":70,"source":64,"tags":71},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1116",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fedk2-docs.gitbooks.io\u002Fsecurity-advisory\u002Fcontent\u002Fbuffer-overflow-in-blockio-service-for-ram-disk.html","Gitbooks",[76,77],"Patch","Vendor Advisory",{"url":79,"source":80,"tags":81},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4ABTDKZK2G5XP6JCO3HXMPOA2NRTIYDZ\u002F","Fedoraproject",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fsupport.hpe.com\u002Fhpsc\u002Fdoc\u002Fpublic\u002Fdisplay?docLocale=en_US&docId=emr_na-hpesbhf03912en_us","Hpe",[],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fusn.ubuntu.com\u002F4349-1\u002F","Ubuntu",[],8,[92],{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":99},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":104,"metaDescription":105,"keywords":106,"canonicalUrl":107,"structuredData":108},"What is CVE-2018-12180? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12180, a high severity cyber security vulnerability from 2019. Buffer overflow in BlockIo service for EDK II may allow an ...","CVE-2018-12180, CVE-2018-12180 vulnerability, CVE-2018-12180 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, tianocore security, opensuse security, edk_ii vulnerability, leap vulnerability","\u002Fwhat-is\u002Fcve-2018-12180",{"@context":109,"@type":110,"headline":104,"description":105,"datePublished":10,"dateModified":11,"author":111,"publisher":115,"about":119,"mainEntityOfPage":123,"articleSection":126,"keywords":127},"https:\u002F\u002Fschema.org","TechArticle",{"@type":112,"name":113,"url":114},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":112,"name":113,"url":114,"logo":116},{"@type":117,"url":118},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":120,"name":6,"description":121,"additionalType":122},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":124,"@id":125},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12180","Cybersecurity","CVE-2018-12180, CVE-2018-12180 vulnerability, CVE-2018-12180 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[129,136],{"Operator":15,"Negate":15,"Nodes":130},[131],{"Operator":132,"Negate":15,"CPEMatch":133},"OR",[134],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":135,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C2325CD2-6DB4-496A-8253-CB5AED8CE111",{"Operator":15,"Negate":15,"Nodes":137},[138],{"Operator":132,"Negate":15,"CPEMatch":139},[140],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":141,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F1E78106-58E6-4D59-990F-75DA575BFAD9",[],[],{"lastModified":11,"cacheTime":145,"version":33},1792265233567,{"score":147,"band":148,"action":149,"scoredAt":150},48,"Medium","Plan remediation","2026-10-16T06:45:52.33783+00:00"]