CVE-2018-3612 - Vulnerability Details

Vendors	Products
Intel	Ayaplcel.86a Bios Bnkbl357.86a Ccsklm30.86a Ccsklm5v.86a Dnkbli30.86a Dnkbli5v.86a Dnkbli7v.86a Fybyt10h.86a Gkaplcpx.86a Kyskli70.86a Mkkbli5v.86a Mkkbly35.86a Mybdwi30.86a Mybdwi5v.86a Rybdwi35.86a Syskli35.86a Tybyt10h.86a

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-04-17T00:00:00", "descriptions": [{"lang": "en", "value": "Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM)."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-10T21:57:01", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2018-3612", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM)."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html", "refsource": "CONFIRM", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T04:50:30.216Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2018-3612", "datePublished": "2018-05-10T22:00:00", "dateReserved": "2017-12-28T00:00:00", "dateUpdated": "2024-08-05T04:50:30.216Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2018-04-17T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM). (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-05-10T21:57:01 (string)

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secure@intel.com (string)

ID : CVE-2018-3612 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM). (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

refsource : CONFIRM (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T04:50:30.216Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

assignerShortName : intel (string)

cveId : CVE-2018-3612 (string)

datePublished : 2018-05-10T22:00:00 (string)

dateReserved : 2017-12-28T00:00:00 (string)

dateUpdated : 2024-08-05T04:50:30.216Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:bios:ayaplcel.86a:*:*:*:*:*:*:*", "matchCriteriaId": "F1896E1D-D6AB-4B50-9FAB-D3447D2999D8", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:bnkbl357.86a:*:*:*:*:*:*:*", "matchCriteriaId": "37453985-F8E6-4ECF-91D6-202451DADA92", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:ccsklm5v.86a:*:*:*:*:*:*:*", "matchCriteriaId": "E034F066-DC2A-4D3E-98B7-FDA72D9D9525", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:ccsklm30.86a:*:*:*:*:*:*:*", "matchCriteriaId": "AA083126-8215-45A0-93E0-89B24F1F64B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:dnkbli5v.86a:*:*:*:*:*:*:*", "matchCriteriaId": "5F6E96F7-D04D-4374-8492-BCD040A3C6A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:dnkbli7v.86a:*:*:*:*:*:*:*", "matchCriteriaId": "A288FDDC-ED63-47EC-81C6-5B0EB2DB7C45", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:dnkbli30.86a:*:*:*:*:*:*:*", "matchCriteriaId": "45A0C3B2-B87D-44E9-A2B5-FC8091000F20", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:fybyt10h.86a:*:*:*:*:*:*:*", "matchCriteriaId": "1AE305F6-9721-465A-BEA3-02A586FDD988", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:gkaplcpx.86a:*:*:*:*:*:*:*", "matchCriteriaId": "79C62F39-AA5A-4005-B52D-C1E71ABF4B4B", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:kyskli70.86a:*:*:*:*:*:*:*", "matchCriteriaId": "D59DF70A-4D07-43AC-92FA-3C0C572A8FBB", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:mkkbli5v.86a:*:*:*:*:*:*:*", "matchCriteriaId": "B3603E56-B75F-4DF9-BF26-1F24F798C819", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:mkkbly35.86a:*:*:*:*:*:*:*", "matchCriteriaId": "9262CEEE-DA83-4FF2-82DF-56B5017FCBED", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:mybdwi5v.86a:*:*:*:*:*:*:*", "matchCriteriaId": "775E8F59-584B-469A-86B2-4624E9F24398", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:mybdwi30.86a:*:*:*:*:*:*:*", "matchCriteriaId": "293D2DD9-388E-49F0-A250-B711AD95A5A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:rybdwi35.86a:*:*:*:*:*:*:*", "matchCriteriaId": "BC3D0C8A-D816-4578-9ECC-341F92F5E83E", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:syskli35.86a:*:*:*:*:*:*:*", "matchCriteriaId": "70A2E146-6025-417C-B9CF-8C50D33CB2DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bios:tybyt10h.86a:*:*:*:*:*:*:*", "matchCriteriaId": "BEE47419-DD81-4EC4-B242-750028B503CA", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:ayaplcel.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "76ACD951-E428-46F3-BE3F-62DCDF5C429A", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:bnkbl357.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "5071F003-8722-4565-896C-05DE1B673DDD", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:ccsklm30.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCE7D8D2-F77C-42B9-B6DC-EA6AFF96F3D3", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:ccsklm5v.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8BFD583-73D3-4502-8F57-346FFD82CBC0", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:dnkbli30.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D9D0EFB-B4CC-445C-8AFC-8DC742FD0791", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:dnkbli5v.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "633957F3-3057-4403-B114-8C1081CD8297", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:dnkbli7v.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CC7C59F-AAE9-4046-9AAB-C7313C395161", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:fybyt10h.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "13A262A3-4129-4566-AC5D-D37ED8524341", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:gkaplcpx.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "7193D25D-CEB0-469B-941D-9CB71308A48A", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:kyskli70.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "2051D75E-C61C-47FB-98E3-43458F7C60C4", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:mkkbli5v.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "DFBBD7A9-18D5-4325-AC7D-77B582A8BF7C", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:mkkbly35.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "0EB25DE7-5731-43C5-BEDC-84E6C3BA44E3", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:mybdwi30.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "D821496B-7B10-46D5-8175-86D5B25855E3", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:mybdwi5v.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "371F831A-9685-460A-83CD-EB8F7A098C50", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:rybdwi35.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "953A2F51-AD64-4474-9367-CB0D05C7CEF9", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:syskli35.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "238F86AD-4B21-42F0-BCC7-1E4A6D0E4AEA", "vulnerable": true}, {"criteria": "cpe:2.3:o:intel:tybyt10h.86a:-:*:*:*:*:*:*:*", "matchCriteriaId": "79E2E85E-12CA-4BAC-AAE9-C1D3A2C34774", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM)."}, {"lang": "es", "value": "Los kits Intel NUC con validaci\u00f3n de entradas insuficiente en el firmware del sistema  pueden permitir que un atacante local eleve privilegios a SMM (System Management Mode)."}], "id": "CVE-2018-3612", "lastModified": "2024-11-21T04:05:46.240", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-05-10T22:29:00.307", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:bios:ayaplcel.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : F1896E1D-D6AB-4B50-9FAB-D3447D2999D8 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:intel:bios:bnkbl357.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 37453985-F8E6-4ECF-91D6-202451DADA92 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:intel:bios:ccsklm5v.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : E034F066-DC2A-4D3E-98B7-FDA72D9D9525 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:intel:bios:ccsklm30.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : AA083126-8215-45A0-93E0-89B24F1F64B2 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:intel:bios:dnkbli5v.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F6E96F7-D04D-4374-8492-BCD040A3C6A4 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:intel:bios:dnkbli7v.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : A288FDDC-ED63-47EC-81C6-5B0EB2DB7C45 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:intel:bios:dnkbli30.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 45A0C3B2-B87D-44E9-A2B5-FC8091000F20 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:intel:bios:fybyt10h.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 1AE305F6-9721-465A-BEA3-02A586FDD988 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:intel:bios:gkaplcpx.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 79C62F39-AA5A-4005-B52D-C1E71ABF4B4B (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:intel:bios:kyskli70.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : D59DF70A-4D07-43AC-92FA-3C0C572A8FBB (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:intel:bios:mkkbli5v.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : B3603E56-B75F-4DF9-BF26-1F24F798C819 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:intel:bios:mkkbly35.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 9262CEEE-DA83-4FF2-82DF-56B5017FCBED (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:intel:bios:mybdwi5v.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 775E8F59-584B-469A-86B2-4624E9F24398 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:intel:bios:mybdwi30.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 293D2DD9-388E-49F0-A250-B711AD95A5A2 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:intel:bios:rybdwi35.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : BC3D0C8A-D816-4578-9ECC-341F92F5E83E (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:intel:bios:syskli35.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : 70A2E146-6025-417C-B9CF-8C50D33CB2DB (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:intel:bios:tybyt10h.86a:*:*:*:*:*:*:* (string)

matchCriteriaId : BEE47419-DD81-4EC4-B242-750028B503CA (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:ayaplcel.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 76ACD951-E428-46F3-BE3F-62DCDF5C429A (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:intel:bnkbl357.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5071F003-8722-4565-896C-05DE1B673DDD (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:intel:ccsklm30.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FCE7D8D2-F77C-42B9-B6DC-EA6AFF96F3D3 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:intel:ccsklm5v.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E8BFD583-73D3-4502-8F57-346FFD82CBC0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:intel:dnkbli30.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7D9D0EFB-B4CC-445C-8AFC-8DC742FD0791 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:intel:dnkbli5v.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 633957F3-3057-4403-B114-8C1081CD8297 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:intel:dnkbli7v.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CC7C59F-AAE9-4046-9AAB-C7313C395161 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:intel:fybyt10h.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 13A262A3-4129-4566-AC5D-D37ED8524341 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:intel:gkaplcpx.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7193D25D-CEB0-469B-941D-9CB71308A48A (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:intel:kyskli70.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2051D75E-C61C-47FB-98E3-43458F7C60C4 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:intel:mkkbli5v.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DFBBD7A9-18D5-4325-AC7D-77B582A8BF7C (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:intel:mkkbly35.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0EB25DE7-5731-43C5-BEDC-84E6C3BA44E3 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:intel:mybdwi30.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D821496B-7B10-46D5-8175-86D5B25855E3 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:intel:mybdwi5v.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 371F831A-9685-460A-83CD-EB8F7A098C50 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:intel:rybdwi35.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 953A2F51-AD64-4474-9367-CB0D05C7CEF9 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:intel:syskli35.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 238F86AD-4B21-42F0-BCC7-1E4A6D0E4AEA (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:intel:tybyt10h.86a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 79E2E85E-12CA-4BAC-AAE9-C1D3A2C34774 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM). (string)

}

1 : { »

lang : es (string)

value : Los kits Intel NUC con validación de entradas insuficiente en el firmware del sistema pueden permitir que un atacante local eleve privilegios a SMM (System Management Mode). (string)

}

]

id : CVE-2018-3612 (string)

lastModified : 2024-11-21T04:05:46.240 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-05-10T22:29:00.307 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object