CVE-2018-3696

CWE-287 — Improper Authentication3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.2%
top 56.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Raid WEB Console 3Intel Corporation Intel Raid WEB Console V3 FOR Windows
Timeline
PublishedNov 14
Latest updateMay 14

Description

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-7vvg-qg7f-32v8: Authentication bypass in the Intel RAID Web Console 3 for Windows before 4↗2022-05-14
▶
CVEList
CVE-2018-3696: Authentication bypass in the Intel RAID Web Console 3 for Windows before 4↗2018-11-14
▶