Vulnerability Description
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Nuc Kit Firmware | - |
| Intel | Nuc Kit D33217Gke | - |
| Intel | Nuc Kit D53427Rke | - |
| Intel | Nuc Kit D54250Wyb | - |
| Intel | Nuc Kit De3815Tybe | - |
| Intel | Nuc Kit Dn2820Fykh | - |
| Intel | Nuc Kit Nuc5Cpyh | - |
| Intel | Nuc Kit Nuc5I3Myhe | - |
| Intel | Nuc Kit Nuc5I5Myhe | - |
| Intel | Nuc Kit Nuc5I7Ryh | - |
| Intel | Nuc Kit Nuc5Pgyh | - |
| Intel | Nuc Kit Nuc6Cays | - |
| Intel | Nuc Kit Nuc6I5Syh | - |
| Intel | Nuc Kit Nuc6I7Kyk | - |
| Intel | Nuc Kit Nuc7Cjyh | - |
| Intel | Nuc Kit Nuc7I3Dnhe | - |
| Intel | Nuc Kit Nuc7I5Dnke | - |
| Intel | Nuc Kit Nuc7I7Bnh | - |
| Intel | Nuc Kit Nuc7I7Dnke | - |
| Intel | Nuc Kit Nuc8I7Hnk | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.Vendor Advisory
FAQ
What is CVE-2018-12176?
CVE-2018-12176 is a vulnerability with a CVSS score of 8.2 (HIGH). Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of...
How severe is CVE-2018-12176?
CVE-2018-12176 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-12176?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc Kit Firmware, Intel Nuc Kit D33217Gke, Intel Nuc Kit D53427Rke, Intel Nuc Kit D54250Wyb, Intel Nuc Kit De3815Tybe.