CVE-2018-12176

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

Metrics

CVSS 3.0 8.2/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Intel Corporation	Intel(R) NUC Kits and Intel(R) Compute Cards	Multiple Intel(R) NUC Kits and Intel(R) Compute Cards (see list in Intel advisory).

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.htmlVendor Advisory

Timeline

Published: Sep 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121777.8Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut CVE-2018-121789.1Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of servi CVE-2018-121797.8Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, informati CVE-2018-12187.5In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes CVE-2018-121808.8Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information d CVE-2018-121816.0Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via CVE-2018-121826.7Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, inf CVE-2018-121836.8Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure CVE-2018-121856.8Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenti CVE-2018-121877.5Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 CVE-2018-121884.6Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0 CVE-2018-121894.4Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before