Intel NUC kits with insufficient input validation in system firmware, potentially allows…
Priority LOW 34CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
Why it matters now
EPSS 0.00316 24th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 34
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:bios:ayaplcel.86a:*:*:*:*:*:*:* | ayaplcel.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:bnkbl357.86a:*:*:*:*:*:*:* | bnkbl357.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:ccsklm5v.86a:*:*:*:*:*:*:* | ccsklm5v.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:ccsklm30.86a:*:*:*:*:*:*:* | ccsklm30.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:dnkbli5v.86a:*:*:*:*:*:*:* | dnkbli5v.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:dnkbli7v.86a:*:*:*:*:*:*:* | dnkbli7v.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:dnkbli30.86a:*:*:*:*:*:*:* | dnkbli30.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:fybyt10h.86a:*:*:*:*:*:*:* | fybyt10h.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:gkaplcpx.86a:*:*:*:*:*:*:* | gkaplcpx.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:kyskli70.86a:*:*:*:*:*:*:* | kyskli70.86a | Vulnerable | Intel |
- cpe:2.3:o:intel:bios:ayaplcel.86a:*:*:*:*:*:*:* Versions ayaplcel.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:bnkbl357.86a:*:*:*:*:*:*:* Versions bnkbl357.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:ccsklm5v.86a:*:*:*:*:*:*:* Versions ccsklm5v.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:ccsklm30.86a:*:*:*:*:*:*:* Versions ccsklm30.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:dnkbli5v.86a:*:*:*:*:*:*:* Versions dnkbli5v.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:dnkbli7v.86a:*:*:*:*:*:*:* Versions dnkbli7v.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:dnkbli30.86a:*:*:*:*:*:*:* Versions dnkbli30.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:fybyt10h.86a:*:*:*:*:*:*:* Versions fybyt10h.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:gkaplcpx.86a:*:*:*:*:*:*:* Versions gkaplcpx.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:kyskli70.86a:*:*:*:*:*:*:* Versions kyskli70.86a Vulnerable ·Intel
Show 24 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:bios:mkkbli5v.86a:*:*:*:*:*:*:* | mkkbli5v.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:mkkbly35.86a:*:*:*:*:*:*:* | mkkbly35.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:mybdwi5v.86a:*:*:*:*:*:*:* | mybdwi5v.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:mybdwi30.86a:*:*:*:*:*:*:* | mybdwi30.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:rybdwi35.86a:*:*:*:*:*:*:* | rybdwi35.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:syskli35.86a:*:*:*:*:*:*:* | syskli35.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:bios:tybyt10h.86a:*:*:*:*:*:*:* | tybyt10h.86a | Vulnerable | Intel |
| cpe:2.3:o:intel:ayaplcel.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:bnkbl357.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:ccsklm30.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:ccsklm5v.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:dnkbli30.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:dnkbli5v.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:dnkbli7v.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:fybyt10h.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:gkaplcpx.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:kyskli70.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:mkkbli5v.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:mkkbly35.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:mybdwi30.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:mybdwi5v.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:rybdwi35.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:syskli35.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:tybyt10h.86a:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
- cpe:2.3:o:intel:bios:mkkbli5v.86a:*:*:*:*:*:*:* Versions mkkbli5v.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:mkkbly35.86a:*:*:*:*:*:*:* Versions mkkbly35.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:mybdwi5v.86a:*:*:*:*:*:*:* Versions mybdwi5v.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:mybdwi30.86a:*:*:*:*:*:*:* Versions mybdwi30.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:rybdwi35.86a:*:*:*:*:*:*:* Versions rybdwi35.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:syskli35.86a:*:*:*:*:*:*:* Versions syskli35.86a Vulnerable ·Intel
- cpe:2.3:o:intel:bios:tybyt10h.86a:*:*:*:*:*:*:* Versions tybyt10h.86a Vulnerable ·Intel
- cpe:2.3:o:intel:ayaplcel.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:bnkbl357.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:ccsklm30.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:ccsklm5v.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:dnkbli30.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:dnkbli5v.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:dnkbli7v.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:fybyt10h.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:gkaplcpx.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:kyskli70.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:mkkbli5v.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:mkkbly35.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:mybdwi30.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:mybdwi5v.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:rybdwi35.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:syskli35.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:tybyt10h.86a:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-3612
- 2026-10-03 Alias added: GHSA-4fj6-3p83-73vm
References
Sources
- CVE-2018-3612 · CVE Program
- CVE-2018-3612 · NVD
- FIRST EPSS
- GHSA-4fj6-3p83-73vm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences