{"id":"CVE-2018-3659","aliases":["EUVD-2018-15513","GHSA-hrpf-w86j-42rg"],"status":"published","title":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE...","description":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00428,"percentile":0.37245,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-09-12T19:00:00Z","modified":"2026-06-17T01:57:38Z","products":[{"vendor":"intel","product":"converged_security_management_engine_firmware"},{"vendor":"intel","product":"trusted_execution_engine_firmware"},{"vendor":"intel corporation","product":"intel(r) platform trust technology (ptt)"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180924-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3659"},{"url":"https://github.com/advisories/GHSA-hrpf-w86j-42rg"}],"sources":{"cve":[{"id":"CVE-2018-3659","description":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.","status":"published","published":"2018-09-12T19:00:00Z","modified":"2024-09-17T02:20:51.669Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15513","description":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.","status":"published","published":"2018-09-12T19:00:00Z","modified":"2024-09-17T02:20:51Z","updated_at":"2026-11-03T00:28:41.388341Z"}],"ghsa":[{"id":"GHSA-hrpf-w86j-42rg","title":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE...","description":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.","status":"published","published":"2022-05-13T01:52:33Z","modified":"2023-02-02T05:02:05Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:51:21.252342Z"}],"nvd":[{"id":"CVE-2018-3659","description":"A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.","status":"published","published":"2018-09-12T19:29:03.107Z","modified":"2026-06-17T01:57:38.45Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:38.672108Z"}]}}