CVE:CVE-2018-3612
CNNVD:CNNVD-201805-328
Intel MKKBLY35.86A等都是美国英特尔（Intel）公司的一款使用在Intel NUC产品中的固件。
多款Intel产品中存在输入验证错误漏洞，该漏洞源于程序没有充分的执行输入验证。本地攻击者可利用该漏洞提升权限。以下产品及版本受到影响：Intel MKKBLY35.86A；MKKBLi5v.86A；GKAPLCPX.86A；DNKBLi7v.86A；DNKBLi5v.86A；DNKBLi30.86A；BNKBL357.86A；AYAPLCEL.86A；SYSKLi35.86A；KYSKLi70.86A；RYBDWi35.86A；MYBDWi5v.86A；MYBDWi30.86A；TYBYT10H.86A；FYBYT10H.86A；CCSKLm5v.86A；CCSKLm30.86A。
solution:Upgrade intel bios to a higher version than ayaplcel.86a,bnkbl357.86a,ccsklm5v.86a,ccsklm30.86a,dnkbli5v.86a,dnkbli7v.86a,dnkbli30.86a,fybyt10h.86a,gkaplcpx.86a,kyskli70.86a,mkkbli5v.86a,mkkbly35.86a,mybdwi5v.86a,mybdwi30.86a,rybdwi35.86a,syskli35.86a,tybyt10h.86a,and avoid the version ayaplcel.86a,bnkbl357.86a,ccsklm5v.86a,ccsklm30.86a,dnkbli5v.86a,dnkbli7v.86a,dnkbli30.86a,fybyt10h.86a,gkaplcpx.86a,kyskli70.86a,mkkbli5v.86a,mkkbly35.86a,mybdwi5v.86a,mybdwi30.86a,rybdwi35.86a,syskli35.86a,tybyt10h.86a; Upgrade intel ayaplcel.86a to a higher version than -; Upgrade intel bnkbl357.86a to a higher version than -; Upgrade intel ccsklm30.86a to a higher version than -; Upgrade intel ccsklm5v.86a to a higher version than -; Upgrade intel dnkbli30.86a to a higher version than -; Upgrade intel dnkbli5v.86a to a higher version than -; Upgrade intel dnkbli7v.86a to a higher version than -; Upgrade intel fybyt10h.86a to a higher version than -; Upgrade intel gkaplcpx.86a to a higher version than -; Upgrade intel kyskli70.86a to a higher version than -; Upgrade intel mkkbli5v.86a to a higher version than -; Upgrade intel mkkbly35.86a to a higher version than -; Upgrade intel mybdwi30.86a to a higher version than -; Upgrade intel mybdwi5v.86a to a higher version than -; Upgrade intel rybdwi35.86a to a higher version than -; Upgrade intel syskli35.86a to a higher version than -; Upgrade intel tybyt10h.86a to a higher version than -