7.8

CVE-2018-3612

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Bios Version ayaplcel.86a
Intel ≫ Bios Version bnkbl357.86a
Intel ≫ Bios Version ccsklm5v.86a
Intel ≫ Bios Version ccsklm30.86a
Intel ≫ Bios Version dnkbli5v.86a
Intel ≫ Bios Version dnkbli7v.86a
Intel ≫ Bios Version dnkbli30.86a
Intel ≫ Bios Version fybyt10h.86a
Intel ≫ Bios Version gkaplcpx.86a
Intel ≫ Bios Version kyskli70.86a
Intel ≫ Bios Version mkkbli5v.86a
Intel ≫ Bios Version mkkbly35.86a
Intel ≫ Bios Version mybdwi5v.86a
Intel ≫ Bios Version mybdwi30.86a
Intel ≫ Bios Version rybdwi35.86a
Intel ≫ Bios Version syskli35.86a
Intel ≫ Bios Version tybyt10h.86a
Intel ≫ Ayaplcel.86a Version -
Intel ≫ Bnkbl357.86a Version -
Intel ≫ Ccsklm30.86a Version -
Intel ≫ Ccsklm5v.86a Version -
Intel ≫ Dnkbli30.86a Version -
Intel ≫ Dnkbli5v.86a Version -
Intel ≫ Dnkbli7v.86a Version -
Intel ≫ Fybyt10h.86a Version -
Intel ≫ Gkaplcpx.86a Version -
Intel ≫ Kyskli70.86a Version -
Intel ≫ Mkkbli5v.86a Version -
Intel ≫ Mkkbly35.86a Version -
Intel ≫ Mybdwi30.86a Version -
Intel ≫ Mybdwi5v.86a Version -
Intel ≫ Rybdwi35.86a Version -
Intel ≫ Syskli35.86a Version -
Intel ≫ Tybyt10h.86a Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.237
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html
Vendor Advisory