Skip to content
OpenAdvisories
Unscored CVE-2018-12147 EUVD-2018-4125GHSA-4c2g-m3v7-xp4r

Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.…

Published Jun 13, 2019 · Updated Aug 5, 2024 · Assigned by intel

Description

Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access.

Affected products

VendorProductAffectedFixed
— Intel(R) CSME Assets Advisory before 11.21.55 —

References