VYPR
← All advisories
High severity7.6NVD Advisory· Published Mar 14, 2019· Updated Jun 17, 2026

CVE-2018-12191

CVE-2018-12191

Description

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Intel/Server Platform Servicesllm-fuzzy2 versions
    <4.00.04.383, <4.01.02.174+ 1 more
    • (no CPE)range: <4.00.04.383, <4.01.02.174
    • cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:*range: >=4.00.04.367,<4.00.04.383
  • Intel/CSMEllm-fuzzy
    Range: <11.8.60, <11.11.60, <11.22.60, <12.0.20
  • Intel/TXEllm-fuzzy
    Range: <3.1.60, <4.0.10
  • Intel/Converged Security Management Engine Firmware
    cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
    Range: >=11.0,<11.8.60
  • Intel/Trusted Execution Engine Firmware
    cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0,<3.1.60
  • Intel Corporation/Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technologyv5
    Range: Multiple versions.

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.