CVE-2018-12176

🗓️ 12 Sep 2018 19:00:00Reported by intelType

Improper input validation in Intel NUC Kits firmware, potentially leading to code execution and security vulnerabilities

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2018-12176	25 Nov 201803:19	–	circl
Cvelist	CVE-2018-12176	12 Sep 201819:00	–	cvelist
EUVD	EUVD-2018-4154	7 Oct 202500:30	–	euvd
Intel	Intel® NUC Firmware Security Advisory	11 Sep 201800:00	–	intel
NVD	CVE-2018-12176	12 Sep 201819:29	–	nvd
Prion	Input validation	12 Sep 201819:29	–	prion

NVD

Node

intel nuc_kit_firmwareMatch-

AND

intel nuc_kit_d33217gkeMatch-

intel nuc_kit_d53427rkeMatch-

intel nuc_kit_d54250wybMatch-

intel nuc_kit_de3815tybeMatch-

intel nuc_kit_dn2820fykhMatch-

intel nuc_kit_nuc5cpyhMatch-

intel nuc_kit_nuc5i3myheMatch-

intel nuc_kit_nuc5i5myheMatch-

intel nuc_kit_nuc5i7ryhMatch-

intel nuc_kit_nuc5pgyhMatch-

intel nuc_kit_nuc6caysMatch-

intel nuc_kit_nuc6i5syhMatch-

intel nuc_kit_nuc6i7kykMatch-

intel nuc_kit_nuc7cjyhMatch-

intel nuc_kit_nuc7i3dnheMatch-

intel nuc_kit_nuc7i5dnkeMatch-

intel nuc_kit_nuc7i7bnhMatch-

intel nuc_kit_nuc7i7dnkeMatch-

intel nuc_kit_nuc8i7hnkMatch-

Node

intel compute_card_firmwareMatch-

AND

intel compute_card_cd1iv128mkMatch-

intel compute_card_cd1m3128mkMatch-

intel compute_card_cd1p64gkMatch-

Node

intel compute_stick_firmwareMatch-

AND

intel compute_stick_stck1a32wfcMatch-

intel compute_stick_stk1aw32scMatch-

intel compute_stick_stk2m3w64ccMatch-

intel compute_stick_stk2mv64ccMatch-

[
  {
    "product": "Intel(R) NUC Kits and Intel(R) Compute Cards",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple Intel(R) NUC Kits and Intel(R) Compute Cards (see list in Intel advisory)."
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html

21 Nov 2024 03:44Current

8.2High risk

Vulners AI Score8.2

CVSS 27.2

CVSS 38.2

EPSS0.00042

CWE-20