CVE-2018-3659

CVE Database · CVE-2018-3659

CVE-2018-3659

· N/AModified

CVSS v3.1

N/A

EPSS

0.42%

Published

Sep 12, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

Affected Products (2)

intel · converged_security_management_engine_firmware (up to 12.0.5)vulnerable

intel · trusted_execution_engine_firmware (up to 4.0)vulnerable

References (4)

https://security.netapp.com/advisory/ntap-20180924-0003/

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html

Vendor Advisory

https://security.netapp.com/advisory/ntap-20180924-0003/

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs