4.6
CVSSv2

CVE-2018-3645

Published: 03/04/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local malicious user to inject keystrokes into another remote keyboard session.

Vulnerable Product Search on Vulmon Subscribe to Product

intel remote_keyboard_mobile_app -

Recent Articles

NUC, NUC! Who's there? Intel, warning you to kill a buggy keyboard app
The Register • Simon Sharwood • 06 Apr 2018

No joke: another security SNAFU for Chipzilla, this time for a popular remote admin app

Intel has made much of its NUC and Compute Stick mini-PCs as a way to place computers to out-of-the-way places like digital signage. Such locations aren’t the kind of spots where keyboards and pointing devices can be found, so Intel sweetened the deal by giving the world an Android and iOS app called the “Intel Remote Keyboard” to let you mimic a keyboard and mouse from afar. But now Chipzilla’s canned the app. The reason is three nasty bugs that let attackers “inject keystrokes as a l...