Lucene search

[email protected]CVE-2018-12189

HistoryMar 14, 2019 - 8:29 p.m.

CVE-2018-12189

2019-03-1420:29:00

CWE-754

[email protected]

web.nvd.nist.gov

cve-2018-12189

unhandled exception

content protection

intel csme

intel txe

privileged user

local access

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

7.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

CPENameOperatorVersion
intel:converged_security_management_engine_firmwareintel converged security management engine firmwarelt11.8.60
intel:converged_security_management_engine_firmwareintel converged security management engine firmwarelt11.11.60
intel:converged_security_management_engine_firmwareintel converged security management engine firmwarelt11.22.60
intel:converged_security_management_engine_firmwareintel converged security management engine firmwarelt12.0.20
intel:trusted_execution_engine_firmwareintel trusted execution engine firmwarelt3.1.60
intel:trusted_execution_engine_firmwareintel trusted execution engine firmwarelt4.0.10

CPE	Name	Operator	Version
intel:converged_security_management_engine_firmware	intel converged security management engine firmware	lt	11.8.60
intel:converged_security_management_engine_firmware	intel converged security management engine firmware	lt	11.11.60
intel:converged_security_management_engine_firmware	intel converged security management engine firmware	lt	11.22.60
intel:converged_security_management_engine_firmware	intel converged security management engine firmware	lt	12.0.20
intel:trusted_execution_engine_firmware	intel trusted execution engine firmware	lt	3.1.60
intel:trusted_execution_engine_firmware	intel trusted execution engine firmware	lt	4.0.10

References

security.netapp.com/advisory/ntap-20190318-0001/

www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

7.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2018-12189

prion1 cvelist1 lenovo2 intel1 hp1 threatpost1