CVE-2018-12199

CVE Database · CVE-2018-12199

CVE-2018-12199

· N/AModified

CVSS v3.1

N/A

EPSS

0.49%

Published

Mar 14, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

Weaknesses (CWE)

CWE-119

Affected Products (6)

intel · converged_security_management_engine_firmware (up to 11.8.60)vulnerable

intel · converged_security_management_engine_firmware (up to 11.11.60)vulnerable

intel · converged_security_management_engine_firmware (up to 11.22.60)vulnerable

intel · converged_security_management_engine_firmware (up to 12.0.20)vulnerable

intel · trusted_execution_engine_firmware (up to 3.1.60)vulnerable

intel · trusted_execution_engine_firmware (up to 4.0.10)vulnerable

References (4)

https://security.netapp.com/advisory/ntap-20190318-0001/

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html

Vendor Advisory

https://security.netapp.com/advisory/ntap-20190318-0001/

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs