VULNERABILITY INTELLIGENCE

CVE-2018-12185

CVSS score6.8 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2019-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references