PT-2018-16105 · Intel · Intel Online Connect Access

Published 2018-05-15 · Updated 2023-02-28 · CVE-2018-3634

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Online Connect Access version 1.9.22.0

Description The issue is related to parameter corruption in the NDIS filter driver, which can be exploited by an attacker to cause a denial of service. This can be achieved via local access.

Recommendations For Intel Online Connect Access version 1.9.22.0, consider disabling the NDIS filter driver as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-3634

Affected Products

Intel Online Connect Access

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00121.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3634 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3634 · Vendor Advisory
• http://securityfocus.com/bid/104250 · Note