CVE-2018-12191

🗓️ 14 Mar 2019 20:00:00Reported by intelType

Bounds check in Intel CSME, Intel Server Platform Services, and Intel TXE may allow unauthorized code executio

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of microprogramming software such as Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec
Circl	CVE-2018-12191	14 Mar 201923:20	–	circl
CNVD	Buffer Overflow Vulnerability in Multiple Intel Products	18 Mar 201900:00	–	cnvd
CVE	CVE-2018-12191	14 Mar 201920:00	–	cve
EUVD	EUVD-2018-4169	7 Oct 202500:30	–	euvd
Hewlett-Packard	HPSBHF03607 rev. 3 - Intel CSME, Trusted Execution Engine (TXE), Active Management Technology (AMT) Security Updates	12 Mar 201900:00	–	hp
Intel	Intel® CSME, Server Platform Services, Trusted Execution Engine and Intel® Active Management Technology 2018.4 QSR Advisory	24 Apr 201900:00	–	intel
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US	14 Mar 201914:33	–	lenovo
Lenovo	Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - US	14 Mar 201914:33	–	lenovo
NVD	CVE-2018-12191	14 Mar 201920:29	–	nvd

[
  {
    "product": "Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple versions."
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html
security	www.security.netapp.com/advisory/ntap-20190318-0001/
support	www.support.hpe.com/hpsc/doc/public/display

04 Apr 2019 21:06Current

7.6High risk

Vulners AI Score7.6

EPSS0.0023