7.8

CVE-2018-3612

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Bios Versionayaplcel.86a
Intel ≫ Bios Versionbnkbl357.86a
Intel ≫ Bios Versionccsklm5v.86a
Intel ≫ Bios Versionccsklm30.86a
Intel ≫ Bios Versiondnkbli5v.86a
Intel ≫ Bios Versiondnkbli7v.86a
Intel ≫ Bios Versiondnkbli30.86a
Intel ≫ Bios Versionfybyt10h.86a
Intel ≫ Bios Versiongkaplcpx.86a
Intel ≫ Bios Versionkyskli70.86a
Intel ≫ Bios Versionmkkbli5v.86a
Intel ≫ Bios Versionmkkbly35.86a
Intel ≫ Bios Versionmybdwi5v.86a
Intel ≫ Bios Versionmybdwi30.86a
Intel ≫ Bios Versionrybdwi35.86a
Intel ≫ Bios Versionsyskli35.86a
Intel ≫ Bios Versiontybyt10h.86a
Intel ≫ Ayaplcel.86a Version-
Intel ≫ Bnkbl357.86a Version-
Intel ≫ Ccsklm30.86a Version-
Intel ≫ Ccsklm5v.86a Version-
Intel ≫ Dnkbli30.86a Version-
Intel ≫ Dnkbli5v.86a Version-
Intel ≫ Dnkbli7v.86a Version-
Intel ≫ Fybyt10h.86a Version-
Intel ≫ Gkaplcpx.86a Version-
Intel ≫ Kyskli70.86a Version-
Intel ≫ Mkkbli5v.86a Version-
Intel ≫ Mkkbly35.86a Version-
Intel ≫ Mybdwi30.86a Version-
Intel ≫ Mybdwi5v.86a Version-
Intel ≫ Rybdwi35.86a Version-
Intel ≫ Syskli35.86a Version-
Intel ≫ Tybyt10h.86a Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.085
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.