CVEvulnerability
CVE-2018-3658
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-772
Description
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Affected configurations
• siemens simatic field pg m5 firmware (< 22.01.06)
• siemens simatic ipc427e firmware (< 21.01.09)
• siemens simatic ipc477e firmware (< 21.01.09)
• siemens simatic ipc547e firmware (< r1.30.0)
• siemens simatic pc547g firmware (< r1.23.0)
• siemens simatic ipc627d firmware (< 19.02.11)
• siemens simatic ipc647d firmware (< 19.01.14)
• siemens simatic ipc677d firmware (< 19.02.11)
• siemens simatic ipc827d firmware (< 19.02.11)
• siemens simatic ipc847d firmware (< 19.01.14)
• siemens simatic itp1000 firmware (< 23.01.04)
• intel converged security management engine firmware (>= 11.0.0 < 12.0.5)
• intel active management technology firmware (< 12.0.5)
• intel manageability engine firmware (>= 9.0.0.0 < 11.0)
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- http://www.securityfocus.com/bid/106996 Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf Patch, Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20180924-0003/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html Vendor Advisory
- http://www.securityfocus.com/bid/106996 Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf Patch, Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 Third Party Advisory, US Government Resource
- https://security.netapp.com/advisory/ntap-20180924-0003/ Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html Vendor Advisory