CVE-2018-12147 Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version...
MediumCVSS 6.7
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel converged security management engine firmware | >= 11.0, <= 11.8.50 | No fix listed |
| intel converged security management engine firmware | >= 11.10, <= 11.11.50 | No fix listed |
| intel converged security management engine firmware | >= 11.20, <= 11.21.51 | No fix listed |
| intel server platform services firmware | < 4.0 | 4.0 |
| intel trusted execution engine firmware | >= 3.0, <= 3.1.50 | No fix listed |
References
- www.intel.com
- www.intel.com vendor-advisory