CVE-2018-12200

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Mar 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.

Affected products

Intel Corporation · Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://security.netapp.com/advisory/ntap-20190318-0001/https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html