Lucene search

[email protected]CVE-2018-3612

HistoryMay 10, 2018 - 10:29 p.m.

CVE-2018-3612

2018-05-1022:29:00

CWE-20

[email protected]

web.nvd.nist.gov

intel

nuc

firmware

vulnerability

privilege escalation

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Affected configurations

NVD

Node

intelbiosMatchayaplcel.86a

intelbiosMatchbnkbl357.86a

intelbiosMatchccsklm5v.86a

intelbiosMatchccsklm30.86a

intelbiosMatchdnkbli5v.86a

intelbiosMatchdnkbli7v.86a

intelbiosMatchdnkbli30.86a

intelbiosMatchfybyt10h.86a

intelbiosMatchgkaplcpx.86a

intelbiosMatchkyskli70.86a

intelbiosMatchmkkbli5v.86a

intelbiosMatchmkkbly35.86a

intelbiosMatchmybdwi5v.86a

intelbiosMatchmybdwi30.86a

intelbiosMatchrybdwi35.86a

intelbiosMatchsyskli35.86a

intelbiosMatchtybyt10h.86a

Node

intelayaplcel.86aMatch-

intelbnkbl357.86aMatch-

intelccsklm30.86aMatch-

intelccsklm5v.86aMatch-

inteldnkbli30.86aMatch-

inteldnkbli5v.86aMatch-

inteldnkbli7v.86aMatch-

intelfybyt10h.86aMatch-

intelgkaplcpx.86aMatch-

intelkyskli70.86aMatch-

intelmkkbli5v.86aMatch-

intelmkkbly35.86aMatch-

intelmybdwi30.86aMatch-

intelmybdwi5v.86aMatch-

intelrybdwi35.86aMatch-

intelsyskli35.86aMatch-

inteltybyt10h.86aMatch-

CPENameOperatorVersion
intel:biosintel bioseqayaplcel.86a
intel:biosintel bioseqbnkbl357.86a
intel:biosintel bioseqccsklm5v.86a
intel:biosintel bioseqccsklm30.86a
intel:biosintel bioseqdnkbli5v.86a
intel:biosintel bioseqdnkbli7v.86a
intel:biosintel bioseqdnkbli30.86a
intel:biosintel bioseqfybyt10h.86a
intel:biosintel bioseqgkaplcpx.86a
intel:biosintel bioseqkyskli70.86a

CPE	Name	Operator	Version
intel:bios	intel bios	eq	ayaplcel.86a
intel:bios	intel bios	eq	bnkbl357.86a
intel:bios	intel bios	eq	ccsklm5v.86a
intel:bios	intel bios	eq	ccsklm30.86a
intel:bios	intel bios	eq	dnkbli5v.86a
intel:bios	intel bios	eq	dnkbli7v.86a
intel:bios	intel bios	eq	dnkbli30.86a
intel:bios	intel bios	eq	fybyt10h.86a
intel:bios	intel bios	eq	gkaplcpx.86a
intel:bios	intel bios	eq	kyskli70.86a

Rows per page:

1-10 of 171

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-3612

nvd1 prion1 cvelist1