Vulnerabilities > CVE-2018-12189 - Improper Check for Unusual or Exceptional Conditions vulnerability in Intel products

CVSS 4.4 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

intel

CWE-754

NVD

Published: 2019-03-14

Updated: 2024-11-21

Summary

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

Vulnerable Configurations

Part	Description	Count
OS	Intel Intel Converged Security Management Engine Firmware 11.0 Intel Converged Security Management Engine Firmware 11.8.50 Intel Converged Security Management Engine Firmware 11.8.55 Intel Converged Security Management Engine Firmware 11.10 Intel Converged Security Management Engine Firmware 11.11.50 Intel Converged Security Management Engine Firmware 11.11.55 Intel Converged Security Management Engine Firmware 11.20 Intel Converged Security Management Engine Firmware 11.21.51 Intel Converged Security Management Engine Firmware 11.22.0 Intel Converged Security Management Engine Firmware 12.0.0 Intel Converged Security Management Engine Firmware 12.0.5 Intel Converged Security Management Engine Firmware 12.0.10 Intel Trusted Execution Engine Firmware 3.0 Intel Trusted Execution Engine Firmware 3.1.50 Intel Trusted Execution Engine Firmware 4.0 Intel Trusted Execution Engine Firmware 4.0.5	16

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References