The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.

🗓️ 05 Oct 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 12 Views

AMT in CSME and ME has memory object processing errors allowing a malicious actor to trigger failures.

Reporter	Title	Published	Views	Family All 16
CNVD	Intel CSME Resource Management Error Vulnerability	16 Sep 201800:00	–	cnvd
CVE	CVE-2018-3658	12 Sep 201819:00	–	cve
Cvelist	CVE-2018-3658	12 Sep 201819:00	–	cvelist
EUVD	EUVD-2018-15512	7 Oct 202500:30	–	euvd
F5 Networks	K68292031: Intel CPU vulnerability CVE-2018-3658	21 Feb 202319:55	–	f5
Hewlett-Packard	HPSBHF03592 rev. 3 - Intel Converged Security and Management Engine (CSME) and Power Management Controller (PMC) Security Updates	11 Sep 201800:00	–	hp
HPE Security Bulletins	HPESBHF03876 rev.1 - HPE ProLiant ML10 Gen9 Servers with Intel-based Processors using Active Management Technology (AMT), Multiple Local Vulnerabilities	11 Sep 201800:00	–	hpe
ICS	Siemens Intel Active Management Technology of SIMATIC IPCs	12 Feb 201900:00	–	ics
Intel	Intel® Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory	11 Sep 201800:00	–	intel
Lenovo	Intel CSME / SPS and TXE Vulnerabilities - Lenovo Support US	1 Oct 201819:13	–	lenovo

Vulners

Node

OR

intel intel_management_engineRange9.0–9.1.45

intel intel_management_engineRange9.5–9.5.65

intel intel_management_engineRange10.0.0–10.0.60

intel intel_converged_security_and_manageability_engineRange11.0.0–11.8.55

intel intel_converged_security_and_manageability_engineRange11.10.0–11.11.55

intel intel_converged_security_and_manageability_engineRange11.20.0–11.21.55

intel intel_converged_security_and_manageability_engineRange12.0.3–12.0.6

siemens_ag simatic_field_pg_m5Range<22.01.06

siemens_ag simatic_ipc427eRange<21.01.09

siemens_ag simatic_ipc477eRange<21.01.09

siemens_ag simatic_ipc627dRange<19.02.11

siemens_ag simatic_ipc647dRange<19.01.14

siemens_ag simatic_ipc677dRange<19.02.11

siemens_ag simatic_ipc827dRange<19.02.11

siemens_ag simatic_ipc847dRange<19.01.14

siemens_ag simatic_itp1000Range<23.01.04

Source	Link
cxsecurity	www.cxsecurity.com/cveshow/CVE-2018-3658/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
securityfocus	www.securityfocus.com/bid/106996
security	www.security.netapp.com/advisory/ntap-20180924-0003/
support	www.support.hpe.com/hpsc/doc/public/display
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

23 Mar 2021 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 35.3

EPSS0.03303

Active Management Technology Converged Security Engine Management Engine Memory Object Processing Service Failures