CVE-2018-12147
MEDIUM
6.7
CVSS Severity Score
Vulnerability Description
Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access.
Affected Platforms (CPE)
💻
Intel
Converged Security Management Engine Firmware
>= 11.0 and <= 11.8.50💻
Intel
Converged Security Management Engine Firmware
>= 11.10 and <= 11.11.50💻
Intel
Converged Security Management Engine Firmware
>= 11.20 and <= 11.21.51💻
Intel
Server Platform Services Firmware
< 4.0💻
Intel