Vulnerability Details : CVE-2018-12176

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
Publish Date : 2018-09-12 Last Update Date : 2019-10-02

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	7.2
Confidentiality Impact	Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact	Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact	Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Denial Of ServiceExecute Code
CWE ID	20

- Products Affected By CVE-2018-12176

#	Product Type	Vendor	Product	Version
1	OS	Intel	Compute Card Firmware	-	Version Details Vulnerabilities
2	OS	Intel	Compute Stick Firmware	-	Version Details Vulnerabilities
3	OS	Intel	Nuc Kit Firmware	-	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Intel	Compute Card Firmware	1
Intel	Compute Stick Firmware	1
Intel	Nuc Kit Firmware	1

- References For CVE-2018-12176

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Intel Nuc Kit Firmware	Intel Nuc Kit D33217gke Intel Nuc Kit D53427rke Intel Nuc Kit D54250wyb Intel Nuc Kit De3815tybe Intel Nuc Kit Dn2820fykh Intel Nuc Kit Nuc5cpyh Intel Nuc Kit Nuc5i3myhe Intel Nuc Kit Nuc5i5myhe Intel Nuc Kit Nuc5i7ryh Intel Nuc Kit Nuc5pgyh Intel Nuc Kit Nuc6cays Intel Nuc Kit Nuc6i5syh Intel Nuc Kit Nuc6i7kyk Intel Nuc Kit Nuc7cjyh Intel Nuc Kit Nuc7i3dnhe Intel Nuc Kit Nuc7i5dnke Intel Nuc Kit Nuc7i7bnh Intel Nuc Kit Nuc7i7dnke Intel Nuc Kit Nuc8i7hnk
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Intel Compute Card Firmware	Intel Compute Card Cd1iv128mk Intel Compute Card Cd1m3128mk Intel Compute Card Cd1p64gk
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Intel Compute Stick Firmware	Intel Compute Stick Stck1a32wfc Intel Compute Stick Stk1aw32sc Intel Compute Stick Stk2m3w64cc Intel Compute Stick Stk2mv64cc

- Metasploit Modules Related To CVE-2018-12176

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)