Siemens Intel Active Management Technology of SIMATIC IPCs

🗓️ 12 Feb 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 113 Views

Siemens Intel AMT of SIMATIC IPCs has vulnerabilities including cryptographic issues, memory buffer operations, and resource management errors, potentially leading to code execution, denial-of-service, or information disclosure

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.	5 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of Intel Active Management Technology (AMT) for microprogramming software such as Intel Converged Security and Manageability Engine and Intel Management Engine allows a perpetrator to execute arbitrary code with AMT privileges.	5 Oct 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability relates to the implementation of the TLS protocol by the Intel Active Management Technology (AMT) subsystem of the Intel Converged Security and Manageability Engine and the Intel Management Engine. This vulnerability allows a attacker to obtain the TLS session key.	5 Oct 201800:00	–	bdu_fstec
CNVD	Intel CSME AMT Buffer Overflow Vulnerability	16 Sep 201800:00	–	cnvd
CNVD	Unspecified Vulnerability in Intel Active Management Technology	16 Sep 201800:00	–	cnvd
CNVD	Intel CSME Resource Management Error Vulnerability	16 Sep 201800:00	–	cnvd
CVE	CVE-2018-3616	12 Sep 201819:00	–	cve
CVE	CVE-2018-3657	12 Sep 201819:00	–	cve
CVE	CVE-2018-3658	12 Sep 201819:00	–	cve
Cvelist	CVE-2018-3616	12 Sep 201819:00	–	cvelist

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-377318.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-043-05.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-043-05
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

12 Feb 2019 00:00Current

7High risk

Vulners AI Score7

CVSS 27.2

CVSS 3.16.7

EPSS0.01472