Unhandled Exception in Intel CSME and TXE Security Subsystems
CVE-2018-12189
4.4MEDIUM
Key Information:
- Vendor
- Intel
- Vendor
- CVE Published:
- 14 March 2019
Summary
An unhandled exception in the Content Protection subsystem of Intel CSME and TXE software can grant a privileged user the capability to modify critical data through local access. This issue affects multiple versions, making it essential for users and administrators to apply the necessary updates to safeguard systems against potential misuse.
Affected Version(s)
Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology Multiple versions.
References
CVSS V3.1
Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved