NetSight
IP …
high7.6

CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00…

Impact

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Affected products

VendorProductAffected versions
IntelConverged Security Management Engine Firmware
from 11.0 before 11.8.60
from 11.10 before 11.11.60
from 11.20 before 11.22.60
from 12.0.0 before 12.0.20
IntelServer Platform Services Firmware
from 4.00.04.367 before 4.00.04.383
from 4.01.00.152.0 before 4.01.02.174
IntelTrusted Execution Engine Firmware
from 3.0 before 3.1.60
from 4.0 before 4.0.10

Weakness classification

CWE-119

References