8.2

CVE-2018-3682

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Bmc Firmware Version-
   Intel ≫ Bbs2600bpb Version-
   Intel ≫ Bbs2600bpq Version-
   Intel ≫ Bbs2600bps Version-
   Intel ≫ Bbs2600stb Version-
   Intel ≫ Bbs2600stq Version-
   Intel ≫ Bbs7200ap Version-
   Intel ≫ Bbs7200apl Version-
   Intel ≫ Dbs2600cw2r Version-
   Intel ≫ Dbs2600cw2sr Version-
   Intel ≫ Dbs2600cwtr Version-
   Intel ≫ Dbs2600cwtsr Version-
   Intel ≫ Hns2600bpb Version-
   Intel ≫ Hns2600bpb24 Version-
   Intel ≫ Hns2600bpblc Version-
   Intel ≫ Hns2600bpblc24 Version-
   Intel ≫ Hns2600bpq Version-
   Intel ≫ Hns2600bpq24 Version-
   Intel ≫ Hns2600bps Version-
   Intel ≫ Hns2600bps24 Version-
   Intel ≫ Hns2600kpfr Version-
   Intel ≫ Hns2600kpr Version-
   Intel ≫ Hns2600tp24r Version-
   Intel ≫ Hns2600tp24sr Version-
   Intel ≫ Hns2600tp24str Version-
   Intel ≫ Hns2600tpfr Version-
   Intel ≫ Hns2600tpnr Version-
   Intel ≫ Hns2600tpr Version-
   Intel ≫ Hns7200ap Version-
   Intel ≫ Hns7200apl Version-
   Intel ≫ Hns7200apr Version-
   Intel ≫ Hns7200aprl Version-
   Intel ≫ R1208wftys Version-
   Intel ≫ R1208wt2gsr Version-
   Intel ≫ R1208wttgsr Version-
   Intel ≫ R1304wf0ys Version-
   Intel ≫ R1304wftys Version-
   Intel ≫ R1304wt2gsr Version-
   Intel ≫ R1304wttgsr Version-
   Intel ≫ R2208wf0zs Version-
   Intel ≫ R2208wfqzs Version-
   Intel ≫ R2208wftzs Version-
   Intel ≫ R2208wt2ysr Version-
   Intel ≫ R2208wttyc1r Version-
   Intel ≫ R2208wttysr Version-
   Intel ≫ R2224wfqzs Version-
   Intel ≫ R2224wftzs Version-
   Intel ≫ R2224wttysr Version-
   Intel ≫ R2308wftzs Version-
   Intel ≫ R2308wttysr Version-
   Intel ≫ R2312wf0np Version-
   Intel ≫ R2312wfqzs Version-
   Intel ≫ R2312wftzs Version-
   Intel ≫ R2312wttysr Version-
   Intel ≫ S2600kpfr Version-
   Intel ≫ S2600kpr Version-
   Intel ≫ S2600kptr Version-
   Intel ≫ S2600stb Version-
   Intel ≫ S2600stq Version-
   Intel ≫ S2600tpfr Version-
   Intel ≫ S2600tpnr Version-
   Intel ≫ S2600tpr Version-
   Intel ≫ S2600tptr Version-
   Intel ≫ S2600wfo Version-
   Intel ≫ S2600wfq Version-
   Intel ≫ S2600wft Version-
   Intel ≫ S2600wt2r Version-
   Intel ≫ S2600wttr Version-
   Intel ≫ S2600wtts1r Version-
   Intel ≫ S7200apr Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.113
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.2 1.5 6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.