CVE-2018-12185
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
- Score
- CVSS 3.0 6.8 Medium
- Status
- Modified - secure@intel.com
- Published
- 2019-03-14
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
- Converged Security Management Engine Firmware (Intel)
- Intelr Csme (Intel Corporation)
- Server Platform Services (Intel Corporation)
- Trusted Execution Engine And Intelr Active Management Technology (Intel Corporation)
References
- https://security.netapp.com/advisory/ntap-20190318-0001/
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
