CyberSec.Space Logo
Back to CVE Browser

CVE-2018-3628

HIGH
8.8
CVSS Severity Score
EPSS Score0.0470%
EPSS Percentile35.96th
PublishedJul 10, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.

Affected Platforms (CPE)

💻
Intel

Active Management Technology Firmware

>= 3.0 and <= 11.22.70

References & Advisories

🔗 http://www.securitytracker.com/id/1041362
🔗 https://security.netapp.com/advisory/ntap-20190327-0001/
🔗 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us
🔗 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html
🔗 http://www.securitytracker.com/id/1041362
🔗 https://security.netapp.com/advisory/ntap-20190327-0001/
🔗 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us
🔗 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html

Related Vulnerabilities

CVE-2017-57117.8

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6...

CVE-2017-57127.2

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1...

CVE-2018-36326.7

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x ...

CVE-2018-36296.5

Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3...