Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology vulnerabilities

Product

Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology

by Intel Corporation · last CVE Mar 14, 2019

CVEs

On KEV

7.6

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 3Medium 9Low 0

Severity

All severities12 Critical0 High3 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-12191	7.6	0%	Mar 14	Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS… Affected: Multiple versions.
CVE-2018-12208	7.6	1%	Mar 14	Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server… Affected: Multiple versions.
CVE-2018-12187	7.5	1%	Mar 14	Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to… Affected: Multiple versions.
CVE-2018-12192	6.8	0%	Mar 14	Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may… Affected: Multiple versions.
CVE-2018-12185	6.8	0%	Mar 14	Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute… Affected: Multiple versions.
CVE-2018-12190	6.7	0%	Mar 14	Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user… Affected: Multiple versions.
CVE-2018-12196	6.7	0%	Mar 14	Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary… Affected: Multiple versions.
CVE-2018-12200	6.7	0%	Mar 14	Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access Affected: Multiple versions.
CVE-2018-12199	6.2	0%	Mar 14	Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user… Affected: Multiple versions.
CVE-2018-12198	6.0	0%	Mar 14	Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of… Affected: Multiple versions.
CVE-2018-12188	4.6	0%	Mar 14	Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user… Affected: Multiple versions.
CVE-2018-12189	4.4	0%	Mar 14	Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged… Affected: Multiple versions.