Vulnerabilities > CVE-2018-3679 - Unspecified vulnerability in Intel Data Center Manager

CVSS 9.6 - CRITICAL

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

low complexity

intel

critical

NVD

Published: 2018-09-12

Updated: 2019-10-03

Summary

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Data Center Manager - Intel Data Center Manager 1.1 Intel Data Center Manager 1.2 Intel Data Center Manager 1.3 Intel Data Center Manager 1.4 Intel Data Center Manager 1.5 Intel Data Center Manager 2.0 Intel Data Center Manager 2.1 Intel Data Center Manager 2.2 Intel Data Center Manager 2.3 Intel Data Center Manager 2.4 Intel Data Center Manager 2.5 Intel Data Center Manager 2.6 Intel Data Center Manager 2.7 Intel Data Center Manager 2.8 Intel Data Center Manager 2.9 Intel Data Center Manager 3.0 Intel Data Center Manager 3.1 Intel Data Center Manager 3.2 Intel Data Center Manager 3.3 Intel Data Center Manager 3.4 Intel Data Center Manager 3.5 Intel Data Center Manager 3.6 Intel Data Center Manager 3.6.1 Intel Data Center Manager 3.6.2 Intel Data Center Manager 3.7 Intel Data Center Manager 3.8 Intel Data Center Manager 3.9 Intel Data Center Manager 3.9.1 Intel Data Center Manager 4.0 Intel Data Center Manager 4.0.1 Intel Data Center Manager 4.1	32

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00143.html