CVE-2018-12163

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
Intel Corporation	Intel IoT Developers Kit	4.0 and earlier.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.htmlVendor Advisory

Timeline

Published: Sep 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121664.4Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to poten CVE-2018-121674.4Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potential CVE-2018-121687.8Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user t CVE-2018-121697.6Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Process CVE-2018-12179.8Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1 CVE-2018-121719.8Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to CVE-2018-121725.5Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a p CVE-2018-121737.6Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01 CVE-2018-121747.8Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate CVE-2018-121757.8Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privile CVE-2018-121768.2Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in info CVE-2018-121777.8Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut