Lucene search

[email protected]CVE-2018-3616

HistorySep 12, 2018 - 7:29 p.m.

CVE-2018-3616

2018-09-1219:29:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2018-3616

bleichenbacher

vulnerability

tls

intel amt

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

77.0%

JSON

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

CPENameOperatorVersion
intel:manageability_engine_firmwareintel manageability engine firmwarelt11.0
intel:active_management_technology_firmwareintel active management technology firmwarelt12.0.5
intel:converged_security_management_engine_firmwareintel converged security management engine firmwarelt12.0.5
siemens:simatic_field_pg_m5_firmwaresiemens simatic field pg m5 firmwarelt22.01.06
siemens:simatic_ipc427e_firmwaresiemens simatic ipc427e firmwarelt21.01.09
siemens:simatic_ipc477e_firmwaresiemens simatic ipc477e firmwarelt21.01.09
siemens:simatic_ipc547e_firmwaresiemens simatic ipc547e firmwareltr1.30.0
siemens:simatic_pc547g_firmwaresiemens simatic pc547g firmwareltr1.23.0
siemens:simatic_ipc627d_firmwaresiemens simatic ipc627d firmwarelt19.02.11
siemens:simatic_ipc647d_firmwaresiemens simatic ipc647d firmwarelt19.01.14

CPE	Name	Operator	Version
intel:manageability_engine_firmware	intel manageability engine firmware	lt	11.0
intel:active_management_technology_firmware	intel active management technology firmware	lt	12.0.5
intel:converged_security_management_engine_firmware	intel converged security management engine firmware	lt	12.0.5
siemens:simatic_field_pg_m5_firmware	siemens simatic field pg m5 firmware	lt	22.01.06
siemens:simatic_ipc427e_firmware	siemens simatic ipc427e firmware	lt	21.01.09
siemens:simatic_ipc477e_firmware	siemens simatic ipc477e firmware	lt	21.01.09
siemens:simatic_ipc547e_firmware	siemens simatic ipc547e firmware	lt	r1.30.0
siemens:simatic_pc547g_firmware	siemens simatic pc547g firmware	lt	r1.23.0
siemens:simatic_ipc627d_firmware	siemens simatic ipc627d firmware	lt	19.02.11
siemens:simatic_ipc647d_firmware	siemens simatic ipc647d firmware	lt	19.01.14

Rows per page:

1-10 of 141

References

www.securityfocus.com/bid/106996

cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf

ics-cert.us-cert.gov/advisories/ICSA-19-043-05

security.netapp.com/advisory/ntap-20180924-0003/

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

77.0%

JSON

Related for CVE-2018-3616

prion1 cvelist1 f51 openvas1 ics1 intel1 lenovo2 hp1