CVE-2018-12158 - Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access

Back Back to CVE browser

MEDIUM

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access

Published Oct 10, 2018

6.0

MEDIUM

CVSS 3.0

EPSS 0.33%

Description

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access.

Affected products

Vendor Intel Corporation Product Intel NUC Firmware Kits Default
n/a
- Version
  Before May 24, 2018
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel Corporation

Intel NUC Firmware Kits

n/a

Version	Status	Constraints
Before May 24, 2018	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4136
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00168.html
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4136		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00168.html		x_refsource_CONFIRMPatchVendor Advisory