{"id":"CVE-2018-12189","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-12189","generatedAt":"2026-10-28T23:58:00.006Z","title":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","description":"Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.","published":"2019-03-14T20:29:00.000Z","lastModified":"2026-06-17T01:37:17.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.0","score":4.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-754"],"affected":["intel/converged security management engine firmware","intel/trusted execution engine firmware"],"epss":{"score":0.00295,"percentile":0.21989,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://security.netapp.com/advisory/ntap-20190318-0001/","source":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20190318-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-12189","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}