CVE-2018-12196

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
intelconverged_security_management_engine_firmware
11.0 ≤
𝑥
< 11.8.60
intelconverged_security_management_engine_firmware
11.10 ≤
𝑥
< 11.11.60
intelconverged_security_management_engine_firmware
11.20 ≤
𝑥
< 11.22.60
intelconverged_security_management_engine_firmware
12.0.0 ≤
𝑥
< 12.0.20
𝑥
= Vulnerable software versions