CVE-2018-12192

—

CVSS 3.0

6.8 medium

EPSS

<1%p39

Published

Mar 14, 2019 (Mar 14, 2019)

Modified

Jun 17, 2026

Description

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.

Vendors: intel
Products: converged security management engine firmware, server platform services firmware
Weakness: CWE-287
Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.