CVE-2018-12190

Published: Mar 14, 2019Modified: Nov 21, 2024

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.

Affected (6)

Products: Intel: Converged Security Management Engine Firmware, Trusted Execution Engine Firmware

Intel

2 products

Converged Security Management Engine Firmware

Trusted Execution Engine Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security Management Engine Firmware	From 11.0 to 11.8.60
Intel Converged Security Management Engine Firmware	From 11.10 to 11.11.60
Intel Converged Security Management Engine Firmware	From 11.20 to 11.22.60
Intel Converged Security Management Engine Firmware	From 12.0.0 to 12.0.20
Intel Trusted Execution Engine Firmware	From 3.0 to 3.1.60
Intel Trusted Execution Engine Firmware	From 4.0 to 4.0.10