cvelist/2018/12xxx/CVE-2018-12190.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "secure@intel.com",
      "DATE_PUBLIC" : "2019-03-12T00:00:00",
      "ID" : "CVE-2018-12190",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "Multiple versions."
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "Intel Corporation"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "Insufficient input validation in Intel CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially execute arbitrary code via local access."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Escalation of Privilege"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html",
            "refsource" : "CONFIRM",
            "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html"
         }
      ]
   }
}