CVE-2018-3682

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.

Metrics

CVSS 3.0 8.2/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Jul 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36837.8Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-36847.8Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.CVE-2018-36866.7Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbi CVE-2018-36877.8Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitr CVE-2018-36887.8Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arb CVE-2018-36895.5AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local a CVE-2018-36914.7Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constan CVE-2018-36935.6Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at CVE-2018-36965.5Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administra CVE-2018-36977.8Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an esca CVE-2018-36987.8Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged CVE-2018-36996.1Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.