CVE-2018-12208

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.5%

probabilidad de explotación

0.5%top 59% de las CVE

explotación observada

noninguna fuente lo reporta

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Productos afectados

Intel Corporation · Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology

Referencias

https://security.netapp.com/advisory/ntap-20190318-0001/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03914en_us https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html