CVE-2018-12190

MEDIUM

Intel CSME <11.8.60,11.11.60,11.22.60,12.0.20 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190318-0001/

Scores

CVSS v3 6.7
EPSS 0.0013
EPSS Percentile 32.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
intel/converged_security_management_engine_firmware 11.0 - 11.8.60
intel/trusted_execution_engine_firmware 3.0 - 3.1.60
Published Mar 14, 2019
Tracked Since Feb 18, 2026