CVE-2018-12185

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Published: Mar 14, 2019
Updated: Apr 13, 2023
CVE: CVE-2018-12185
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
intel / converged_security_management_engine_firmware	11.0	11.8.60
intel / converged_security_management_engine_firmware	11.10	11.11.60
intel / converged_security_management_engine_firmware	11.20	11.22.60
intel / converged_security_management_engine_firmware	12.0.0	12.0.20

https://security.netapp.com/advisory/ntap-20190318-0001/
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html

Vulnerability Database

289,599

CVE-2018-12185