TI-2018-02698 Aliases CVE-2018-3696 GHSA-7vvg-qg7f-32v8

Improper authentication in Intel RAID Web Console v3 for Windows

LOW 25CWE-287Published 2018-11-14 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.

Why it matters now

EPSS 0.00358 29th percentileScored 2026-11-07

Fix Fixed Intel RAID Web Console v3 for Windows (Intel Corporation): 4.186

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Intel RAID Web Console v3 for Windows	before 4.186	4.186	Patch available	CNA

Intel RAID Web Console v3 for Windows VendorIntel Affected before 4.186 Fixed in 4.186 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:intel:raid_web_console_3:::::windows:::*	before 4.186	Vulnerable	Intel

cpe:2.3:a:intel:raid_web_console_3:*:*:*:*:windows:*:*:* Versions before 4.186 Vulnerable ·Intel

Remediation

Fix · CNA Intel RAID Web Console v3 for Windows (Intel Corporation) Fixed in 4.186

Timeline

2026-10-02 Threatist record created from CVE-2018-3696
2026-10-03 Alias added: GHSA-7vvg-qg7f-32v8

References

Advisory 1

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00196.html

TI-2019-08320 Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and… CVSS 3.1CRITICAL 9.8
TI-2020-06961 Improper input validation in Intel RAID Web Console 3 for Windows* Advisory CVSS 3.1HIGH 7.5
TI-2020-00547 Incorrect default permissions in Intel® RAID Web Console 3 for Windows CVSS 3.1HIGH 7.8
TI-2019-10867 Incorrect default permissions in Intel RWC 3 for Windows CVSS 3.1HIGH 7.8
TI-2018-02701 Cross-site scripting in Intel RAID Web Console v3 CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences