What’s Vulnerable › Vulnerabilities

CVE-2018-3612

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-10 · updated 2026-06-17
• Weakness: CWE-20

Description

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).

Affected products

• Intel Ayaplcel.86A: all versions
• Intel BIOS: ayaplcel.86a, bnkbl357.86a, ccsklm5v.86a, ccsklm30.86a, dnkbli5v.86a, dnkbli7v.86a (+11)
• Intel Bnkbl357.86A: all versions
• Intel Ccsklm30.86A: all versions
• Intel Ccsklm5V.86A: all versions
• Intel Dnkbli30.86A: all versions
• Intel Dnkbli5V.86A: all versions
• Intel Dnkbli7V.86A: all versions
• Intel Fybyt10H.86A: all versions
• Intel Gkaplcpx.86A: all versions
• Intel Kyskli70.86A: all versions
• Intel Mkkbli5V.86A: all versions
• Intel Mkkbly35.86A: all versions
• Intel Mybdwi30.86A: all versions
• Intel Mybdwi5V.86A: all versions
• Intel Rybdwi35.86A: all versions
• Intel Syskli35.86A: all versions
• Intel Tybyt10H.86A: all versions

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00110.html

Get alerted when CVE-2018-3612 or the next vulnerability affects your stack