The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.

🗓️ 27 Mar 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Intel microprogramming vulnerability allows arbitrary code execution via operations outside memory buffers.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2018-12191	14 Mar 201923:20	–	circl
CNVD	Buffer Overflow Vulnerability in Multiple Intel Products	18 Mar 201900:00	–	cnvd
CVE	CVE-2018-12191	14 Mar 201920:00	–	cve
Cvelist	CVE-2018-12191	14 Mar 201920:00	–	cvelist
EUVD	EUVD-2018-4169	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates	12 Mar 201900:00	–	hp
Intel	Intel® CSME, Server Platform Services, Trusted Execution Engine and Intel® Active Management Technology 2018.4 QSR Advisory	24 Apr 201900:00	–	intel
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US	14 Mar 201914:33	–	lenovo
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - US	14 Mar 201914:33	–	lenovo
NVD	CVE-2018-12191	14 Mar 201920:29	–	nvd

Vulners

Node

intel intel_converged_security_and_manageability_engineRange11.0–11.8.60

OR

intel intel_converged_security_and_manageability_engineRange11.10–11.11.60

OR

intel intel_converged_security_and_manageability_engineRange11.20–11.22.60

OR

intel intel_converged_security_and_manageability_engineRange12.0–12.0.20

OR

intel intel_trusted_execution_engineRange3.0–3.1.60

OR

intel intel_trusted_execution_engineRange4.0–4.0.10

OR

intel intel_server_platform_servicesRange4.00.04.367–4.00.04.383

OR

intel intel_server_platform_servicesRange4.01.00.152.0–4.01.02.174

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00185.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-12191
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 25.6

CVSS 36.8

EPSS0.0023

Converged Security Engine Manageability Engine Trusted Execution Engine Server Platform Services