Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-12147

EPSS 0.04% · P14
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-12147

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Intel Converged Security and Management Engine、Server Platform Services和Trusted Execution Engine HECI subsystem 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Intel Converged Security and Management Engine（CSME）等都是美国英特尔（Intel）公司的产品。Intel Converged Security and Management Engine是一款安全管理引擎。Intel Server Platform Services（SPS）是一款服务器平台服务程序。Intel Trusted Execution Engine是一款使用在CPU（中央处理器）中具有硬件验证功能的信任执行引擎。 使用11.21.55之前版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Intel(R) CSME Assets Advisory before 11.21.55 -

II. Public POCs for CVE-2018-12147

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-12147

请登录查看更多情报信息。

Same Patch Batch · n/a · 2019-06-13 · 38 CVEs total

CVE-2019-11119Intel RAID Web Console 3 输入验证错误漏洞
CVE-2019-0177Intel Open Cloud Integrity Technology 输入验证错误漏洞
CVE-2019-0178Intel Open Cloud Integrity Technology 竞争条件问题漏洞
CVE-2019-0179Intel Open Cloud Integrity Technology 安全特征问题漏洞
CVE-2019-0180Intel Open Cloud Integrity Technology 安全特征问题漏洞
CVE-2019-0181Intel Open Cloud Integrity Technology和Intel OpenAttestation 输入验证错误漏洞
CVE-2019-0182Intel Open Cloud Integrity Technology 路径遍历漏洞
CVE-2019-0183Intel Open Cloud Integrity Technology 信息泄露漏洞
CVE-2019-11092Intel Open Cloud Integrity Technology 安全特征问题漏洞
CVE-2019-11117Intel Omni-Path Fabric Manager GUI 授权问题漏洞
CVE-2019-0175Intel OpenAttestation 权限许可和访问控制问题漏洞
CVE-2019-11123Intel NUC Kit 输入验证错误漏洞
CVE-2019-11124Intel NUC Kit 缓冲区错误漏洞
CVE-2019-11125Intel NUC Kit 输入验证错误漏洞
CVE-2019-11126Intel NUC Kit 缓冲区错误漏洞
CVE-2019-11127Intel NUC Kit 缓冲区错误漏洞
CVE-2019-11128Intel NUC Kit 输入验证错误漏洞
CVE-2019-11129Intel NUC Kit 缓冲区错误漏洞
CVE-2018-3702Intel ITE Tech* Consumer Infrared Driver 权限许可和访问控制问题漏洞
CVE-2019-5245Huawei HiSuite 代码问题漏洞

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a

V. Comments for CVE-2018-12147

No comments yet

Leave a comment