CVE-2018-12189
First published: Thu Mar 14 2019(Updated: )
Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Converged Security Management Engine Firmware | >=11.0<11.8.60 | |
| Intel Converged Security Management Engine Firmware | >=11.10<11.11.60 | |
| Intel Converged Security Management Engine Firmware | >=11.20<11.22.60 | |
| Intel Converged Security Management Engine Firmware | >=12.0.0<12.0.20 | |
| Intel Trusted Execution Engine Firmware | >=3.0<3.1.60 | |
| Intel Trusted Execution Engine Firmware | >=4.0<4.0.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-12189?
CVE-2018-12189 is an unhandled exception vulnerability in the Content Protection subsystem in Intel CSME and Intel TXE.
How does CVE-2018-12189 impact my system?
CVE-2018-12189 may allow a privileged user to potentially modify data via local access.
What versions of Intel CSME are affected by CVE-2018-12189?
Intel CSME versions 11.0 to 11.8.60, 11.10 to 11.11.60, 11.20 to 11.22.60, and 12.0.0 to 12.0.20 are affected by CVE-2018-12189.
What versions of Intel TXE are affected by CVE-2018-12189?
Intel TXE versions 3.0 to 3.1.60 and 4.0 to 4.0.10 are affected by CVE-2018-12189.
How severe is CVE-2018-12189?
CVE-2018-12189 has a severity score of 4.4, which is considered medium.
How can I fix the CVE-2018-12189 vulnerability?
To fix the CVE-2018-12189 vulnerability, update Intel CSME to version 11.8.60, 11.11.60, 11.22.60, or 12.0.20, and update Intel TXE to version 3.1.60 or 4.0.10.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel converged security management engine firmware
- version/intel converged security management engine firmware/11.0
- version/intel converged security management engine firmware/11.10
- version/intel converged security management engine firmware/11.20
- version/intel converged security management engine firmware/12.0.0
- canonical/intel trusted execution engine firmware
- version/intel trusted execution engine firmware/3.0
- version/intel trusted execution engine firmware/4.0