Vulnerabilities > Intel > Converged Security Management Engine Firmware > 12.0.10

DATE CVE VULNERABILITY TITLE RISK
2019-03-14 CVE-2018-12189 Improper Check for Unusual or Exceptional Conditions vulnerability in Intel products
Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.
local
low complexity
intel CWE-754
4.4
2019-03-14 CVE-2018-12188 Improper Input Validation vulnerability in Intel products
Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.
low complexity
intel CWE-20
4.6
2019-03-14 CVE-2018-12185 Improper Input Validation vulnerability in Intel Converged Security Management Engine Firmware
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
low complexity
intel CWE-20
6.8