CVE-2018-3612 Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
HighCVSS 7.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel bios | = ayaplcel.86a | No fix listed |
| intel bios | = bnkbl357.86a | No fix listed |
| intel bios | = ccsklm5v.86a | No fix listed |
| intel bios | = ccsklm30.86a | No fix listed |
| intel bios | = dnkbli5v.86a | No fix listed |
| intel bios | = dnkbli7v.86a | No fix listed |
| intel bios | = dnkbli30.86a | No fix listed |
| intel bios | = fybyt10h.86a | No fix listed |
| intel bios | = gkaplcpx.86a | No fix listed |
| intel bios | = kyskli70.86a | No fix listed |
| intel bios | = mkkbli5v.86a | No fix listed |
| intel bios | = mkkbly35.86a | No fix listed |
| intel bios | = mybdwi5v.86a | No fix listed |
| intel bios | = mybdwi30.86a | No fix listed |
| intel bios | = rybdwi35.86a | No fix listed |
| intel bios | = syskli35.86a | No fix listed |
| intel bios | = tybyt10h.86a | No fix listed |
| intel ayaplcel.86a | All versions | No fix listed |
| intel bnkbl357.86a | All versions | No fix listed |
| intel ccsklm30.86a | All versions | No fix listed |
| intel ccsklm5v.86a | All versions | No fix listed |
| intel dnkbli30.86a | All versions | No fix listed |
| intel dnkbli5v.86a | All versions | No fix listed |
| intel dnkbli7v.86a | All versions | No fix listed |
| intel fybyt10h.86a | All versions | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| intel gkaplcpx.86a | All versions | No fix listed |
| intel kyskli70.86a | All versions | No fix listed |
| intel mkkbli5v.86a | All versions | No fix listed |
| intel mkkbly35.86a | All versions | No fix listed |
| intel mybdwi30.86a | All versions | No fix listed |
| intel mybdwi5v.86a | All versions | No fix listed |
| intel rybdwi35.86a | All versions | No fix listed |
| intel syskli35.86a | All versions | No fix listed |
| intel tybyt10h.86a | All versions | No fix listed |
References
- www.intel.com vendor-advisory