CVE-2018-12158

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...

CVE-2018-12158

The CVE-2018-12158 issue affects Intel NUC Firmware Kits’ BIOS update utility. Insufficient input validation in the BIOS update executable for kits downloaded before May 24, 2018 could allow a local, privileged user to trigger a denial of service or information disclosure. Affected devices are In...

CVE-2018-12158: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access...

PT-2018-2697

Name of the Vulnerable Software and Affected Versions Intel NUC FW kits versions prior to May 24, 2018 Description The issue is related to insufficient input validation in the BIOS update utility, which may allow a privileged user to trigger a denial of service or information disclosure via local...

CVE-2018-12176

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access...

Input validation

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access...

CVE-2018-12176

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access...

CVE-2018-12176

CVE-2018-12176 affects Intel NUC firmware via improper input validation in Intel NUC Kits firmware, potentially allowing a local privileged user to execute arbitrary code, leading to information disclosure, escalation of privilege and/or denial of service. The Intel Intel-SA-00176 advisory confir...

CVE-2018-12176: Improper Input Validation

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access...

PT-2018-11050

Name of the Vulnerable Software and Affected Versions Intel NUC Kits affected versions not specified Description The issue is related to improper input validation in the firmware, which may allow a privileged user to execute arbitrary code. This could result in information disclosure, escalation ...

CVE-2018-3612

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

Input validation

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

PT-2018-16096

Name of the Vulnerable Software and Affected Versions Intel NUC kits affected versions not specified Description The issue is related to insufficient input validation in system firmware, which could allow a local attacker to elevate privileges to System Management Mode SMM. Recommendations At the...

CVE-2018-3612: Improper Input Validation

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

Intel® NUC BIOS SW SMI Call-Out

Summary: This update will improve the security of system firmware for the below listed Intel NUC models. Description: Intel has identified a potential vulnerability in Intel NUC kits with insufficient input validation in system firmware that potentially allows a local attacker to elevate privileg...

Intel® NUC Kit with Infineon Trusted Platform Module

Summary: Certain Intel® NUC systems contain an Infineon Trusted Platform Module TPM that has an information disclosure vulnerability as described in CVE-2017-15361. Description: Recently, a research team developed advanced mathematical methods to exploit the characteristics of acceleration...

Design/Logic Flaw

Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery...

CVE-2017-5722

CVE-2017-5722 corresponds to an Intel NUC BIOS/system firmware issue: incorrect policy enforcement allows local or physical attackers to bypass integrity protections by manipulating firmware storage on NUC7i3/5/7 BN0049 and below. The vulnerability is discussed alongside related BIOS security iss...

PT-2017-16679

Name of the Vulnerable Software and Affected Versions Intel NUC versions BN0049 and below Description The issue is related to insufficient protection of password storage in system firmware, allowing local attackers to bypass Administrator and User passwords via access to password storage. This...

CVE-2017-5700: Insufficiently Protected Credentials

Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to bypass Administrator and User passwords via access to password storage...