CVE-2018-3659

6.8 mediumEPSS 0.4%

Medium (6.8) in intel. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

Severity

CVSS 3.0

6.8 medium

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
Published: 2018-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:converged_security_management_engine_firmware
intel:trusted_execution_engine_firmware

References

https://security.netapp.com/advisory/ntap-20180924-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html
https://security.netapp.com/advisory/ntap-20180924-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html

Check your stack JSON