CVE-2018-3657

🗓️ 12 Sep 2018 19:00:00Reported by intelType

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access

Reporter	Title	Published	Views	Family All 13
CNVD	Intel CSME AMT Buffer Overflow Vulnerability	16 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-3657	12 Sep 201819:00	–	cvelist
EUVD	EUVD-2018-15511	7 Oct 202500:30	–	euvd
F5 Networks	K11561403: Intel CPU vulnerability CVE-2018-3657	21 Feb 202319:54	–	f5
Hewlett-Packard	HPSBHF03592 rev. 3 - Intel Converged Security and Management Engine (CSME) and Power Management Controller (PMC) Security Updates	11 Sep 201800:00	–	hp
ICS	Siemens Intel Active Management Technology of SIMATIC IPCs	12 Feb 201900:00	–	ics
Intel	Intel® Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory	11 Sep 201800:00	–	intel
Lenovo	Intel CSME / SPS and TXE Vulnerabilities - Lenovo Support US	1 Oct 201819:13	–	lenovo
Lenovo	Intel CSME / SPS and TXE Vulnerabilities - US	20 Sep 201816:57	–	lenovo
NVD	CVE-2018-3657	12 Sep 201819:29	–	nvd

NVD

Node

siemens simatic_field_pg_m5_firmwareRange<22.01.06

AND

siemens simatic_field_pg_m5Match-

Node

siemens simatic_ipc427e_firmwareRange<21.01.09

AND

siemens simatic_ipc427eMatch-

Node

siemens simatic_ipc477e_firmwareRange<21.01.09

AND

siemens simatic_ipc477eMatch-

Node

siemens simatic_ipc547e_firmwareRange<r1.30.0

AND

siemens simatic_pc547eMatch-

Node

siemens simatic_pc547g_firmwareRange<r1.23.0

AND

siemens simatic_ipc547gMatch-

Node

siemens simatic_ipc627d_firmwareRange<19.02.11

AND

siemens simatic_ipc627dMatch-

Node

siemens simatic_ipc647d_firmwareRange<19.01.14

AND

siemens simatic_ipc647dMatch-

Node

siemens simatic_ipc677d_firmwareRange<19.02.11

AND

siemens simatic_ipc677dMatch-

Node

siemens simatic_ipc827d_firmwareRange<19.02.11

AND

siemens simatic_ipc827dMatch-

Node

siemens simatic_ipc847d_firmwareRange<19.01.14

AND

siemens simatic_ipc847dMatch-

Node

siemens simatic_itp1000_firmwareRange<23.01.04

AND

siemens simatic_itp1000Match-

Node

intel converged_security_management_engine_firmwareRange11.0.0–12.0.5

intel active_management_technology_firmwareRange<12.0.5

intel manageability_engine_firmwareRange9.0.0.0–11.0

[
  {
    "product": "Intel(R) Active Management Technology",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before version 12.0.5."
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
securityfocus	www.securityfocus.com/bid/106996
security	www.security.netapp.com/advisory/ntap-20180924-0003/
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-19-043-05
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 04:05Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

CVSS 27.2

EPSS0.00264

CWE-119