CVE-2018-12192 is a logic bug in the Intel Converged Security and Management Engine (CSME) and Intel Server Platform Services (SPS) firmware, affecting versions prior to 11.8.60, 11.11.60, 11.22.60, 12.0.20, and SPS_E5_04.00.04.393.0 respectively. This vulnerability carries a CVSS score of 6.8 (Medium) and allows an unauthenticated attacker with physical access to potentially bypass MEBx authentication. The impact is high for confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 11.0, < 11.8.60CPE matchmatch criteria | cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:* | ||
>= 11.10, < 11.11.60CPE matchmatch criteria | cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:* | ||
>= 11.20, < 11.22.60CPE matchmatch criteria | cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:* | ||
>= 12.0.0, < 12.0.20CPE matchmatch criteria | cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:* | ||
< sps_e5_04.00.04.393.0CPE matchmatch criteria | cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.