mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
462 lines
13 KiB
JSON
462 lines
13 KiB
JSON
{
|
|
"id": "CVE-2016-8103",
|
|
"sourceIdentifier": "secure@intel.com",
|
|
"published": "2016-12-08T17:59:01.583",
|
|
"lastModified": "2016-12-27T14:35:34.800",
|
|
"vulnStatus": "Analyzed",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Llamada SMM en todos los Intel Branded NUC Kits permite a usuarios locales privilegiados acceder al System Management Mode y tomar el control completo de la plataforma."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV30": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.0",
|
|
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 6.7,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 0.8,
|
|
"impactScore": 5.9
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "SINGLE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "COMPLETE",
|
|
"availabilityImpact": "COMPLETE",
|
|
"baseScore": 6.8
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 3.1,
|
|
"impactScore": 10.0,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-264"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "ccsklm5v.86a",
|
|
"matchCriteriaId": "7F0CE04C-A5D0-471C-8B23-2D5B41D130D0"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "kyskli70.86a",
|
|
"matchCriteriaId": "07BD9752-DE75-4F3D-BB09-5A301D400C0E"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc6i7kyb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C68C682E-7C48-4CBC-B930-56EB93765480"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "pybwcel.86a",
|
|
"matchCriteriaId": "88D4C2C3-6CF9-4A18-9523-F29B9BA6C269"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5cpyh:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1AEC08E1-22C7-4C2F-AB3E-1A65C09B1CFB"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5pgyh:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BA76A826-FA4E-4B1E-8B24-77799D3727DB"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5ppyh:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "83C621C2-6FA8-427F-BE2C-2DB6B5A910E8"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:city_bios:ccsklm30.86a:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C4F4857B-08FC-4516-BFB1-12A0021894C2"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk2mv64cc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9497CA1C-A3CA-4CC4-8192-69DF58630575"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "fybyt10h.86a",
|
|
"matchCriteriaId": "D641BC47-E80C-4BA2-AD3E-3BC0DCC17069"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:dn2820fyb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "06AE2097-A3C0-4241-9B8D-540AD1E71A67"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "ccsklm30.86a",
|
|
"matchCriteriaId": "04A09FCF-F784-4DBC-9676-9ACDCC5101F2"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk2m3w64cc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "123782EB-5B44-492A-86B1-D10C03C89D64"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:swift_canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "syskli35.86a",
|
|
"matchCriteriaId": "FAA69CC5-704E-492E-B5DD-EB7C62735057"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc6i3syb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2399979E-026B-4A1B-953F-CEE188ECB305"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc6i5syb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D9C1CE90-5183-49B9-A477-3B78D186DC70"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:citry_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "scchtax5.86a",
|
|
"matchCriteriaId": "C730B3C5-6F79-49FA-8A17-D818D8776DA3"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk1aw32sc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1B7E1240-3DAB-40A1-A7C5-20FDBFC344A9"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "mybdwi5v.86a",
|
|
"matchCriteriaId": "2620DC57-3EAE-4026-A378-66D338886F60"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5i3mybe:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E3371249-3123-49D8-80C1-A2EFFF1FC859"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "mybdwi30.86a",
|
|
"matchCriteriaId": "FA9AAD87-59E0-4708-87E8-26931FA088AF"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5i3mybe:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E3371249-3123-49D8-80C1-A2EFFF1FC859"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:city_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "scchtax5.86a",
|
|
"matchCriteriaId": "4A14C8D9-1F2F-4519-B645-693B51F06A52"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk1a32sc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4A109261-534E-4D0C-B94A-2194CBF2FF13"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:stk1aw32sc:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1B7E1240-3DAB-40A1-A7C5-20FDBFC344A9"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:canyon_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "rybdwi35.86a",
|
|
"matchCriteriaId": "21A69392-379C-43BF-8BB6-5BBC6AE3E588"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5i3ryb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EB003BB8-022A-4DDB-A025-38363EDCEB17"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5i5ryb:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E7F6B597-D173-4F9E-A6BB-3E7E56251A4A"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:nuc5i7rykh:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E95E0035-96A5-40D8-BE5B-1DF95EC25687"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/95012",
|
|
"source": "secure@intel.com",
|
|
"tags": [
|
|
"Third Party Advisory",
|
|
"VDB Entry"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00057&languageid=en-fr",
|
|
"source": "secure@intel.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |