Nuc Kit Firmware
CVE-2018-12176
HIGH
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
AnalysisAI
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-20. Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access. Affected products include: Intel Nuc Kit Firmware, Intel Compute Card Firmware, Intel Compute Stick Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Nuc Kit Firmware
View allInsufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially en
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable es
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable
Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of
Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl
Same weakness CWE-20 – Improper Input Validation
View allShare
External POC / Exploit Code
Leaving vuln.today