Lucene search

K
cveIntelCVE-2018-3612
HistoryMay 10, 2018 - 10:29 p.m.

CVE-2018-3612

2018-05-1022:29:00
CWE-20
intel
web.nvd.nist.gov
21
intel
nuc
firmware
vulnerability
privilege escalation

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Affected configurations

Nvd
Node
intelbiosMatchayaplcel.86a
OR
intelbiosMatchbnkbl357.86a
OR
intelbiosMatchccsklm5v.86a
OR
intelbiosMatchccsklm30.86a
OR
intelbiosMatchdnkbli5v.86a
OR
intelbiosMatchdnkbli7v.86a
OR
intelbiosMatchdnkbli30.86a
OR
intelbiosMatchfybyt10h.86a
OR
intelbiosMatchgkaplcpx.86a
OR
intelbiosMatchkyskli70.86a
OR
intelbiosMatchmkkbli5v.86a
OR
intelbiosMatchmkkbly35.86a
OR
intelbiosMatchmybdwi5v.86a
OR
intelbiosMatchmybdwi30.86a
OR
intelbiosMatchrybdwi35.86a
OR
intelbiosMatchsyskli35.86a
OR
intelbiosMatchtybyt10h.86a
Node
intelayaplcel.86aMatch-
OR
intelbnkbl357.86aMatch-
OR
intelccsklm30.86aMatch-
OR
intelccsklm5v.86aMatch-
OR
inteldnkbli30.86aMatch-
OR
inteldnkbli5v.86aMatch-
OR
inteldnkbli7v.86aMatch-
OR
intelfybyt10h.86aMatch-
OR
intelgkaplcpx.86aMatch-
OR
intelkyskli70.86aMatch-
OR
intelmkkbli5v.86aMatch-
OR
intelmkkbly35.86aMatch-
OR
intelmybdwi30.86aMatch-
OR
intelmybdwi5v.86aMatch-
OR
intelrybdwi35.86aMatch-
OR
intelsyskli35.86aMatch-
OR
inteltybyt10h.86aMatch-
VendorProductVersionCPE
intelbiosayaplcel.86acpe:2.3:o:intel:bios:ayaplcel.86a:*:*:*:*:*:*:*
intelbiosbnkbl357.86acpe:2.3:o:intel:bios:bnkbl357.86a:*:*:*:*:*:*:*
intelbiosccsklm5v.86acpe:2.3:o:intel:bios:ccsklm5v.86a:*:*:*:*:*:*:*
intelbiosccsklm30.86acpe:2.3:o:intel:bios:ccsklm30.86a:*:*:*:*:*:*:*
intelbiosdnkbli5v.86acpe:2.3:o:intel:bios:dnkbli5v.86a:*:*:*:*:*:*:*
intelbiosdnkbli7v.86acpe:2.3:o:intel:bios:dnkbli7v.86a:*:*:*:*:*:*:*
intelbiosdnkbli30.86acpe:2.3:o:intel:bios:dnkbli30.86a:*:*:*:*:*:*:*
intelbiosfybyt10h.86acpe:2.3:o:intel:bios:fybyt10h.86a:*:*:*:*:*:*:*
intelbiosgkaplcpx.86acpe:2.3:o:intel:bios:gkaplcpx.86a:*:*:*:*:*:*:*
intelbioskyskli70.86acpe:2.3:o:intel:bios:kyskli70.86a:*:*:*:*:*:*:*
Rows per page:
1-10 of 341

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2018-3612