CVE-2018-3612
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - secure@intel.com
- Published
- 2018-05-10
- Last modified
- 2024-08-05
- Weaknesses
- CWE-20
Affected products
- Ayaplcel.86a (Intel)
- Bios (Intel)
- Bnkbl357.86a (Intel)
- Ccsklm30.86a (Intel)
- Ccsklm5v.86a (Intel)
- Dnkbli30.86a (Intel)
- Dnkbli5v.86a (Intel)
- Dnkbli7v.86a (Intel)
- Fybyt10h.86a (Intel)
- Gkaplcpx.86a (Intel)
- Kyskli70.86a (Intel)
- Mkkbli5v.86a (Intel)
- Mkkbly35.86a (Intel)
- Mybdwi30.86a (Intel)
- Mybdwi5v.86a (Intel)
- Rybdwi35.86a (Intel)
- Syskli35.86a (Intel)
- Tybyt10h.86a (Intel)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html
