NetSight
high7.8

CVE-2018-3612

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Impact

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Affected products

VendorProductAffected versions
IntelBios
Versions ayaplcel.86a, bnkbl357.86a, ccsklm5v.86a, ccsklm30.86a, dnkbli5v.86a, dnkbli7v.86a
IntelAyaplcel.86a
All versions
IntelBnkbl357.86a
All versions
IntelCcsklm30.86a
All versions
IntelCcsklm5v.86a
All versions
IntelDnkbli30.86a
All versions
IntelDnkbli5v.86a
All versions
IntelDnkbli7v.86a
All versions
IntelFybyt10h.86a
All versions
IntelGkaplcpx.86a
All versions
IntelKyskli70.86a
All versions
IntelMkkbli5v.86a
All versions

Weakness classification

References