CVE-2018-3679 Privilege escalation in Intel(R) Data Center Manager SDK

What is CVE-2018-3679?

CVE-2018-3679 is a critical vulnerability in Intel(R) Data Center Manager SDK, published on 12 Sep 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.

Which versions are affected by CVE-2018-3679?

It affects 1 product.

Products include Intel Data Center Manager.

How do I fix CVE-2018-3679?

No fix has been published for CVE-2018-3679 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-3679 being exploited?

There is no known exploitation of CVE-2018-3679 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) Data Center Manager SDK

• CVE-2023-31273 Privilege escalation in Intel DCM software Critical 10.0
• CVE-2022-33942 Security feature bypass in Intel(R) DCM software High 8.8
• CVE-2022-23182 Auth bypass in Intel(R) Data Center Manager software High 8.8
• CVE-2020-12347 Privilege escalation in Intel(R) Data Center Manager Console High 8.8
• CVE-2019-0102 Auth bypass in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7359-3f37-863c.