CVEvulnerability

CVE-2018-3616

5.9 MEDIUM Published 2018-09-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Affected configurations

• intel converged security management engine firmware (>= 11.0.0 < 12.0.5) • intel active management technology firmware (< 12.0.5) • intel manageability engine firmware (>= 9.0.0.0 < 11.0) • siemens simatic field pg m5 firmware (< 22.01.06) • siemens simatic ipc427e firmware (< 21.01.09) • siemens simatic ipc477e firmware (< 21.01.09) • siemens simatic ipc547e firmware (< r1.30.0) • siemens simatic pc547g firmware (< r1.23.0) • siemens simatic ipc627d firmware (< 19.02.11) • siemens simatic ipc647d firmware (< 19.01.14) • siemens simatic ipc677d firmware (< 19.02.11) • siemens simatic ipc827d firmware (< 19.02.11) • siemens simatic ipc847d firmware (< 19.01.14) • siemens simatic itp1000 firmware (< 23.01.04)

References