CVE-2018-3659: Medium severity intel converged security and management engine vulnerability
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3659?
CVE-2018-3659 has a severity rating of medium, indicating a potential risk to systems with the affected firmware.
How do I fix CVE-2018-3659?
To mitigate CVE-2018-3659, update the Intel CSME firmware to version 12.0.5 or later, and Intel TXE firmware to version 4.0 or later.
Who is affected by CVE-2018-3659?
CVE-2018-3659 affects systems utilizing Intel Converged Security Management Engine firmware versions before 12.0.5 and Intel Trusted Execution Engine firmware versions before 4.0.
What kind of information can be disclosed due to CVE-2018-3659?
CVE-2018-3659 may allow an unauthenticated user to potentially disclose sensitive information if they have physical access to the affected systems.
Is physical access required to exploit CVE-2018-3659?
Yes, physical access to the device is necessary to exploit the CVE-2018-3659 vulnerability.