{"id":"CVE-2018-12189","aliases":["EUVD-2018-4167","GHSA-r7wq-qq39-ch45"],"status":"published","title":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11...","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00295,"percentile":0.2227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-754"],"published":"2019-03-14T20:00:00Z","modified":"2026-06-17T01:37:17Z","products":[{"vendor":"intel","product":"converged_security_management_engine_firmware"},{"vendor":"intel","product":"trusted_execution_engine_firmware"},{"vendor":"intel corporation","product":"intel(r) csme, server platform services, trusted execution engine and intel(r) active management technology"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190318-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12189"},{"url":"https://github.com/advisories/GHSA-r7wq-qq39-ch45"}],"sources":{"cve":[{"id":"CVE-2018-12189","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","status":"published","published":"2019-03-14T20:00:00Z","modified":"2024-09-16T18:24:24.087Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-4167","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","status":"published","published":"2019-03-14T20:00:00Z","modified":"2024-09-16T18:24:24Z","updated_at":"2026-11-03T00:55:32.945265Z"}],"ghsa":[{"id":"GHSA-r7wq-qq39-ch45","title":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11...","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","status":"published","published":"2022-05-13T01:49:30Z","modified":"2023-02-02T05:01:53Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:51:17.485612Z"}],"nvd":[{"id":"CVE-2018-12189","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","status":"published","published":"2019-03-14T20:29:00.397Z","modified":"2026-06-17T01:37:17.443Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:04:54.21788Z"}]}}