CVE-2018-12208

—

CVSS 3.0

7.6 high

EPSS

<1%p42

Published

Mar 14, 2019 (Mar 14, 2019)

Modified

Jun 17, 2026

Description

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Vendors: intel
Products: converged security management engine firmware, server platform services firmware, trusted execution engine firmware
Weakness: CWE-119
Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.