CVE-2018-3659
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
- Score
- CVSS 3.0 6.8 Medium
- Status
- Modified - secure@intel.com
- Published
- 2018-09-12
- Last modified
- 2024-09-17
Affected products
- Converged Security Management Engine Firmware (Intel)
- Trusted Execution Engine Firmware (Intel)
- Intelr Platform Trust Technology Ptt (Intel Corporation)
References
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html