CVEvulnerability
CVE-2018-3657
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Affected configurations
• siemens simatic field pg m5 firmware (< 22.01.06)
• siemens simatic ipc427e firmware (< 21.01.09)
• siemens simatic ipc477e firmware (< 21.01.09)
• siemens simatic ipc547e firmware (< r1.30.0)
• siemens simatic pc547g firmware (< r1.23.0)
• siemens simatic ipc627d firmware (< 19.02.11)
• siemens simatic ipc647d firmware (< 19.01.14)
• siemens simatic ipc677d firmware (< 19.02.11)
• siemens simatic ipc827d firmware (< 19.02.11)
• siemens simatic ipc847d firmware (< 19.01.14)
• siemens simatic itp1000 firmware (< 23.01.04)
• intel converged security management engine firmware (>= 11.0.0 < 12.0.5)
• intel active management technology firmware (< 12.0.5)
• intel manageability engine firmware (>= 9.0.0.0 < 11.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/106996 Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf Patch, Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20180924-0003/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html Vendor Advisory
- http://www.securityfocus.com/bid/106996 Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf Patch, Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20180924-0003/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html Vendor Advisory