CVE-2018-3659

medium

Description

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html

https://security.netapp.com/advisory/ntap-20180924-0003/

Details

Source: Mitre, NVD

Published: 2018-09-12

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.8

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H