CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.1%

CVSS Severity

CVSS v3 Score 7.6

CVSS v2 Score 7.2

References

Products affected by CVE-2018-12191

Intel » Converged Security Management Engine Firmware » Version: 11.0

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0
Intel » Converged Security Management Engine Firmware » Version: 11.10

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.10
Intel » Converged Security Management Engine Firmware » Version: 11.11.50

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.11.50
Intel » Converged Security Management Engine Firmware » Version: 11.11.55

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.11.55
Intel » Converged Security Management Engine Firmware » Version: 11.20

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.20
Intel » Converged Security Management Engine Firmware » Version: 11.21.51

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.21.51
Intel » Converged Security Management Engine Firmware » Version: 11.22.0

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.22.0
Intel » Converged Security Management Engine Firmware » Version: 11.8.50

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.50
Intel » Converged Security Management Engine Firmware » Version: 11.8.55

cpe:2.3:o:intel:converged_security_management_engine_firmware:11.8.55
Intel » Converged Security Management Engine Firmware » Version: 12.0.0

cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.0
Intel » Converged Security Management Engine Firmware » Version: 12.0.10

cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.10
Intel » Converged Security Management Engine Firmware » Version: 12.0.5

cpe:2.3:o:intel:converged_security_management_engine_firmware:12.0.5
Intel » Server Platform Services Firmware » Version: 4.00.04.367

cpe:2.3:o:intel:server_platform_services_firmware:4.00.04.367
Intel » Server Platform Services Firmware » Version: 4.00.04.382

cpe:2.3:o:intel:server_platform_services_firmware:4.00.04.382
Intel » Server Platform Services Firmware » Version: 4.01.00.152.0

cpe:2.3:o:intel:server_platform_services_firmware:4.01.00.152.0
Intel » Server Platform Services Firmware » Version: 4.01.02.173

cpe:2.3:o:intel:server_platform_services_firmware:4.01.02.173
Intel » Trusted Execution Engine Firmware » Version: 3.0

cpe:2.3:o:intel:trusted_execution_engine_firmware:3.0
Intel » Trusted Execution Engine Firmware » Version: 3.1.50

cpe:2.3:o:intel:trusted_execution_engine_firmware:3.1.50
Intel » Trusted Execution Engine Firmware » Version: 4.0

cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0
Intel » Trusted Execution Engine Firmware » Version: 4.0.5

cpe:2.3:o:intel:trusted_execution_engine_firmware:4.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12191

Products

Pricing

Contact Us