CVE-2018-3657

MEDIUM

6.7

Description

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.

Details CVE

Score CVSS v3.16.7

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie9/12/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

intel:active_management_technology_firmwareintel:converged_security_management_engine_firmwareintel:manageability_engine_firmwaresiemens:simatic_field_pg_m5siemens:simatic_field_pg_m5_firmwaresiemens:simatic_ipc427esiemens:simatic_ipc427e_firmwaresiemens:simatic_ipc477esiemens:simatic_ipc477e_firmwaresiemens:simatic_ipc547e_firmwaresiemens:simatic_ipc547gsiemens:simatic_ipc627dsiemens:simatic_ipc627d_firmwaresiemens:simatic_ipc647dsiemens:simatic_ipc647d_firmwaresiemens:simatic_ipc677dsiemens:simatic_ipc677d_firmwaresiemens:simatic_ipc827dsiemens:simatic_ipc827d_firmwaresiemens:simatic_ipc847dsiemens:simatic_ipc847d_firmwaresiemens:simatic_itp1000siemens:simatic_itp1000_firmwaresiemens:simatic_pc547esiemens:simatic_pc547g_firmware