PT-2018-16113 · Intel · Intel Txe+2

Published 2018-09-12 · Updated 2020-10-30 · CVE-2018-3659

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel CSME firmware versions prior to 12.0.5 Intel TXE firmware versions prior to 4.0

Description A vulnerability in the Intel PTT module may allow an unauthenticated user to potentially disclose information via physical access.

Recommendations For Intel CSME firmware versions prior to 12.0.5, update to version 12.0.5 or later. For Intel TXE firmware versions prior to 4.0, update to version 4.0 or later.

Fix

Related Identifiers

CVE-2018-3659

Affected Products

Intel Csme

Intel Ptt

Intel Txe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-3659 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3659 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html · Vendor Advisory
• https://t.me/cybersecuritytechnologies/2006 · Telegram Post
• https://security.netapp.com/advisory/ntap-20180924-0003 · Note