CVE-2018-3612
High
Description
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
SeverityHigh
CVSS7.8
Exploit probability—
ProductIntel Bios
PublishedMay 10, 2018
First seenMay 10, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel bios | ayaplcel.86a, bnkbl357.86a, ccsklm5v.86a, ccsklm30.86a, dnkbli5v.86a, dnkbli7v.86a, dnkbli30.86a, fybyt10h.86a, gkaplcpx.86a, kyskli70.86a, mkkbli5v.86a, mkkbly35.86a, mybdwi5v.86a, mybdwi30.86a, rybdwi35.86a, syskli35.86a, tybyt10h.86a | — |
| intel ayaplcel.86a | No range specified | — |
| intel bnkbl357.86a | No range specified | — |
| intel ccsklm30.86a | No range specified | — |
| intel ccsklm5v.86a | No range specified | — |
| intel dnkbli30.86a | No range specified | — |
| intel dnkbli5v.86a | No range specified | — |
| intel dnkbli7v.86a | No range specified | — |
| intel fybyt10h.86a | No range specified | — |
| intel gkaplcpx.86a | No range specified | — |
| intel kyskli70.86a | No range specified | — |
| intel mkkbli5v.86a | No range specified | — |
| intel mkkbly35.86a | No range specified | — |
| intel mybdwi30.86a | No range specified | — |
| intel mybdwi5v.86a | No range specified | — |
| intel rybdwi35.86a | No range specified | — |
| intel syskli35.86a | No range specified | — |
| intel tybyt10h.86a | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.