Design/Logic Flaw

2018-09-1219:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

JSON

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

CPENameOperatorVersion
converged_security_management_engine_firmwarelt12.0.5
trusted_execution_engine_firmwarelt4.0

CPE	Name	Operator	Version
	converged_security_management_engine_firmware	lt	12.0.5
	trusted_execution_engine_firmware	lt	4.0

References

security.netapp.com/advisory/ntap-20180924-0003/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html