CVE-2018-12199

MEDIUM

Intel CSME <11.8.60-12.0.20, TXE <3.1.60-4.0.10 - RCE

Title source: llm
STIX 2.1

Description

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190318-0001/

Scores

CVSS v3 6.2
EPSS 0.0015
EPSS Percentile 35.4%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
intel/converged_security_management_engine_firmware 11.0 - 11.8.60
intel/trusted_execution_engine_firmware 3.0 - 3.1.60
Published Mar 14, 2019
Tracked Since Feb 18, 2026