Insufficient Input Validation in Intel CSME and TXE Subsystems
CVE-2018-12190
6.7MEDIUM
Key Information:
- Vendor
Intel
- Vendor
- CVE Published:
- 14 March 2019
What is CVE-2018-12190?
The vulnerability stems from insufficient input validation in the Intel CSME and TXE subsystems, potentially allowing a privileged user to escalate their privileges through local access. This could lead to unauthorized access and manipulation of system controls, posing a risk to the integrity of the device. Users and organizations using affected versions should prioritize updating their systems to mitigate this risk.
Affected Version(s)
Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology Multiple versions.