CVE-2016-8103 Privilege escalation in NUC Kits
A local privileged user can exploit SMM call out to access System Management Mode and take full control of Intel NUC platforms.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8103?
CVE-2016-8103 is a medium-severity vulnerability in Intel NUC Kits, published on 8 Dec 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform.
Weakness: CWE-264
Which versions are affected by CVE-2016-8103?
It affects 4 products.
Products include Intel Canyon Bios, Intel Citry Bios, Intel City Bios, Intel Swift Canyon Bios.
How do I fix CVE-2016-8103?
No fix has been published for CVE-2016-8103 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8103 being exploited?
There is no known exploitation of CVE-2016-8103 in the wild and no public exploit code.
Sources
Also known as GHSA-q75q-75h3-mpqm.