CVE-2018-12199
Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.
- Score
- CVSS 3.0 6.2 Medium
- Status
- Modified - secure@intel.com
- Published
- 2019-03-14
- Last modified
- 2024-09-16
- Weaknesses
- CWE-119
Affected products
- Converged Security Management Engine Firmware (Intel)
- Trusted Execution Engine Firmware (Intel)
- Intelr Csme (Intel Corporation)
- Server Platform Services (Intel Corporation)
- Trusted Execution Engine And Intelr Active Management Technology (Intel Corporation)
References
- https://security.netapp.com/advisory/ntap-20190318-0001/
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
