CVE-2018-3659

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

Metrics

CVSS 3.0 6.8/10CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-36615.5Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash tCVE-2018-36628.0Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to CVE-2018-36635.7Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.CVE-2018-36655.6System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local prCVE-2018-36668.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as aCVE-2018-36677.8Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution ofCVE-2018-36687.8Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbiCVE-2018-36697.5A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthentCVE-2018-36708.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as aCVE-2018-36715.7Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information.CVE-2018-36728.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as aCVE-2018-36799.6Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated use
CVE-2018-3659: Medium severity, CVSS 6.8 | Vulnix