CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LCVE-2018-3658
Medium (5.3). EPSS 3.3% chance of exploitation in the next 30 days.
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Severity
- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-772
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:active_management_technology_firmware
- intel:converged_security_management_engine_firmware
- intel:manageability_engine_firmware
- siemens:simatic_field_pg_m5_firmware
- siemens:simatic_ipc427e_firmware
- siemens:simatic_ipc477e_firmware
- siemens:simatic_ipc547e_firmware
- siemens:simatic_ipc627d_firmware
- siemens:simatic_ipc647d_firmware
- siemens:simatic_ipc677d_firmware
- siemens:simatic_ipc827d_firmware
- siemens:simatic_ipc847d_firmware
- siemens:simatic_itp1000_firmware
- siemens:simatic_pc547g_firmware
References
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us