CVE-2018-12196

MEDIUM

Intel Converged Security Management Engine Firmware 11.0-11.8.59 - Authenticated Remote Code Execution via Local Access

Title source: llm
STIX 2.1

Description

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190318-0001/

Scores

CVSS v3 6.7
EPSS 0.0016
EPSS Percentile 36.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (1)
intel/converged_security_management_engine_firmware 11.0 - 11.8.60
Published Mar 14, 2019
Tracked Since Feb 18, 2026