VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Mar 14, 2019· Updated Jun 17, 2026

CVE-2018-12188

CVE-2018-12188

Description

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Intel/Converged Security Management Engine Firmware
    cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
    Range: >=11.0,<11.8.60
  • Intel/Trusted Execution Engine Firmware
    cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0,<3.1.60
  • Intel/TXEllm-fuzzy
    Range: <3.1.60, <4.0.10
  • Intel/CSMEllm-fuzzy
    Range: <11.8.60, <11.11.60, <11.22.60, <12.0.20
  • Intel Corporation/Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technologyv5
    Range: Multiple versions.

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.