CVE-2018-3635

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Intel Corporation	Intel Rapid Store Technology	versions before 16.7

References

http://seclists.org/fulldisclosure/2021/Mar/55Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/105984Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.htmlVendor Advisory
http://seclists.org/fulldisclosure/2021/Mar/55Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/105984Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.htmlVendor Advisory

Timeline

Published: Nov 14, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36387.8Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a priv CVE-2018-36395.5Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem CVE-2018-36405.6Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized d CVE-2018-36419.8Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.CVE-2018-36438.2A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) b CVE-2018-36457.8Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboa CVE-2018-36465.6Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information resid CVE-2018-36497.8DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in CVE-2018-36507.8Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user CVE-2018-36527.6Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon S CVE-2018-36557.3A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Ex CVE-2018-36576.7Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially exec