CVE-2018-3628

HIGH

8.8

CVSS Severity Score

EPSS Score0.0470%

EPSS Percentile35.96th

Published2018年7月10日

Last Modified2024年11月21日

Vulnerability Description

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.

Affected Platforms (CPE)

💻

Intel

Active Management Technology Firmware

>= 3.0 and <= 11.22.70

References & Advisories

🔗 http://www.securitytracker.com/id/1041362

🔗 https://security.netapp.com/advisory/ntap-20190327-0001/

🔗 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us

🔗 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html