CVSS 3.0
7.3 highCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:NCVE-2018-3655
High (7.3) in intel. EPSS 0.5% chance of exploitation in the next 30 days.
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:converged_security_management_engine_firmware
- intel:server_platform_services_firmware
- intel:trusted_execution_engine_firmware
References
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us