Lucene search

[email protected]CVE-2018-8435

HistorySep 13, 2018 - 12:29 a.m.

CVE-2018-8435

2018-09-1300:29:03

CWE-331

[email protected]

web.nvd.nist.gov

windows

hyper-v

bios

security

vulnerability

windows server 2016

windows 10

servers

nvd

cve-2018-8435

2.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

4.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka “Windows Hyper-V Security Feature Bypass Vulnerability.” This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Affected configurations

Vulners

NVD

Node

microsoftwindows_server_2016Match(Server Core installation)

microsoftwindows_10MatchVersion 1607 for x64-based Systems

microsoftwindows_10MatchVersion 1703 for x64-based Systems

microsoftwindows_10MatchVersion 1709 for x64-based Systems

microsoftwindows_10MatchVersion 1803 for x64-based Systems

microsoftwindows_10Matchx64-based Systems

microsoftwindows_10

VendorProductVersionCPE
microsoftwindows_server_2016(Server Core installation)cpe:2.3:o:microsoft:windows_server_2016:(Server Core installation):*:*:*:*:*:*:*
microsoftwindows_10Version 1607 for x64-based Systemscpe:2.3:o:microsoft:windows_10:Version 1607 for x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10Version 1703 for x64-based Systemscpe:2.3:o:microsoft:windows_10:Version 1703 for x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10Version 1709 for x64-based Systemscpe:2.3:o:microsoft:windows_10:Version 1709 for x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10Version 1803 for x64-based Systemscpe:2.3:o:microsoft:windows_10:Version 1803 for x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10x64-based Systemscpe:2.3:o:microsoft:windows_10:x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10*cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*
microsoftwindows_10*cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_server_2016	(Server Core installation)	cpe:2.3:o:microsoft:windows_server_2016:(Server Core installation):::::::*
microsoft	windows_10	Version 1607 for x64-based Systems	cpe:2.3:o:microsoft:windows_10:Version 1607 for x64-based Systems:::::::*
microsoft	windows_10	Version 1703 for x64-based Systems	cpe:2.3:o:microsoft:windows_10:Version 1703 for x64-based Systems:::::::*
microsoft	windows_10	Version 1709 for x64-based Systems	cpe:2.3:o:microsoft:windows_10:Version 1709 for x64-based Systems:::::::*
microsoft	windows_10	Version 1803 for x64-based Systems	cpe:2.3:o:microsoft:windows_10:Version 1803 for x64-based Systems:::::::*
microsoft	windows_10	x64-based Systems	cpe:2.3:o:microsoft:windows_10:x64-based Systems:::::::*
microsoft	windows_10	*	cpe:2.3:o:microsoft:windows_10::::::::
microsoft	windows_10	*	cpe:2.3:o:microsoft:windows_10::::::::

CNA Affected

[
  {
    "product": "Windows Server 2016",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "(Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "x64-based Systems"
      }
    ]
  },
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1709  (Server Core Installation)"
      },
      {
        "status": "affected",
        "version": "version 1803  (Server Core Installation)"
      }
    ]
  }
]