ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-3612

—
CVSS 3.0
7.8 high
EPSS
<1%p25
Published
()
Modified
Description

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Vendors
intel
Products
bios, ayaplcel.86a, bnkbl357.86a, ccsklm30.86a, ccsklm5v.86a, dnkbli30.86a, dnkbli5v.86a, dnkbli7v.86a, fybyt10h.86a, gkaplcpx.86a, kyskli70.86a, mkkbli5v.86a
Weakness
CWE-20
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.