Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology vulnerabilities

Product

Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology

by Intel Corporation · last CVE Mar 14, 2019

CVEs

On KEV

7.6

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 3Medium 9Low 0

Severity

All severities12 Critical0 High3 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-12191	7.6	0%	Mar 14	Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS… Affected: Multiple versions.
CVE-2018-12208	7.6	1%	Mar 14	Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server… Affected: Multiple versions.
CVE-2018-12187	7.5	1%	Mar 14	Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to… Affected: Multiple versions.