Skip to content
OpenAdvisories
Unscored CVE-2018-12192 EUVD-2018-4170GHSA-w4wf-4wg4-m73g

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services bef…

Published Mar 14, 2019 · Updated Sep 16, 2024 · Assigned by intel

Description

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.

Affected products

VendorProductAffectedFixed
Intel Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology Multiple versions. —

References