The vulnerability of the implementation of Intel Active Management Technology (AMT) for microprogramming software such as Intel Converged Security and Manageability Engine and Intel Management Engine allows a perpetrator to execute arbitrary code with AMT privileges.

🗓️ 05 Oct 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

A vulnerability in Intel Active Management Technology, Security Manageability Engine, and Management Engine due to a buffer overrun enables arbitrary code execution with AMT privileges.

Reporter	Title	Published	Views	Family All 14
CNVD	Intel CSME AMT Buffer Overflow Vulnerability	16 Sep 201800:00	–	cnvd
CVE	CVE-2018-3657	12 Sep 201819:00	–	cve
Cvelist	CVE-2018-3657	12 Sep 201819:00	–	cvelist
EUVD	EUVD-2018-15511	7 Oct 202500:30	–	euvd
F5 Networks	K11561403: Intel CPU vulnerability CVE-2018-3657	21 Feb 202319:54	–	f5
Hewlett-Packard	HPSBHF03592 rev. 3 - Intel Converged Security and Management Engine (CSME) and Power Management Controller (PMC) Security Updates	11 Sep 201800:00	–	hp
ICS	Siemens Intel Active Management Technology of SIMATIC IPCs	12 Feb 201900:00	–	ics
Intel	Intel® Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory	11 Sep 201800:00	–	intel
Lenovo	Intel CSME / SPS and TXE Vulnerabilities - Lenovo Support US	1 Oct 201819:13	–	lenovo
Lenovo	Intel CSME / SPS and TXE Vulnerabilities - US	20 Sep 201816:57	–	lenovo

Vulners

Node

intel intel_management_engineRange9.0–9.1.45

intel intel_management_engineRange9.5–9.5.65

intel intel_management_engineRange10.0.0–10.0.60

intel intel_converged_security_and_manageability_engineRange11.0.0–11.8.55

intel intel_converged_security_and_manageability_engineRange11.10.0–11.11.55

intel intel_converged_security_and_manageability_engineRange11.20.0–11.21.55

intel intel_converged_security_and_manageability_engineRange12.0.3–12.0.6

siemens_ag simatic_field_pg_m5Range<22.01.06

siemens_ag simatic_ipc427eRange<21.01.09

siemens_ag simatic_ipc477eRange<21.01.09

siemens_ag simatic_ipc627dRange<19.02.11

siemens_ag simatic_ipc647dRange<19.01.14

siemens_ag simatic_ipc677dRange<19.02.11

siemens_ag simatic_ipc827dRange<19.02.11

siemens_ag simatic_ipc847dRange<19.01.14

siemens_ag simatic_itp1000Range<23.01.04

Source	Link
cxsecurity	www.cxsecurity.com/cveshow/CVE-2018-3657/
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
securityfocus	www.securityfocus.com/bid/106996
security	www.security.netapp.com/advisory/ntap-20180924-0003/
support	www.support.hpe.com/hpsc/doc/public/display
web	www.web.nvd.nist.gov/view/vuln/detail
security-center	www.security-center.intel.com/advisory.aspx

23 Mar 2021 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 36.7

CVSS 27.2

EPSS0.00264