CVEvulnerability

CVE-2018-3655

7.3 HIGH Published 2018-09-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.3 HIGH — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N

Description

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

Affected configurations

• intel converged security management engine firmware (>= 11.0 <= 11.8.50) • intel converged security management engine firmware (>= 11.10 <= 11.11.50) • intel converged security management engine firmware (>= 11.20 <= 11.21.51) • intel server platform services firmware (< 4.0) • intel trusted execution engine firmware (>= 3.0 <= 3.1.50)

References