CVE-2018-3621

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-14 · updated 2026-06-17
Weakness: CWE-200

Description

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Affected products

Intel Corporation Intel Driver & Support Assistant: before 3.6.0.4 — fixed in 3.6.0.4

How to fix

Upgrade to a fixed version: Intel Corporation Intel Driver & Support Assistant 3.6.0.4. Check the vendor advisory for mitigations.

References

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00187.html
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00187.html

Get alerted when CVE-2018-3621 or the next vulnerability affects your stack