CVE-2018-3679

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.

Metrics

CVSS 3.0 9.6/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-36828.2BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unautCVE-2018-36837.8Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-36847.8Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-36866.7Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbiCVE-2018-36877.8Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrCVE-2018-36887.8Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbCVE-2018-36895.5AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local aCVE-2018-36914.7Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constanCVE-2018-36935.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an atCVE-2018-36965.5Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administraCVE-2018-36977.8Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escaCVE-2018-36987.8Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged
CVE-2018-3679: Critical severity, CVSS 9.6 | Vulnix