CVE-2018-3616
published 2018-09-12CVE-2018-3616: Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to…
medium5.9CVSS 3.1
AVNACHPRNUINSUCHINAN
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | active_management_technology_firmware | < 12.0.5 | 12.0.5 |
| intel | converged_security_management_engine_firmware | >= 11.0.0 < 12.0.5 | 12.0.5 |
| intel | manageability_engine_firmware | >= 9.0.0.0 < 11.0 | 11.0 |
| intel_corporation | intel_active_management_technology | — | — |
| siemens | simatic_field_pg_m5_firmware | < 22.01.06 | 22.01.06 |
| siemens | simatic_ipc427e_firmware | < 21.01.09 | 21.01.09 |
| siemens | simatic_ipc477e_firmware | < 21.01.09 | 21.01.09 |
| siemens | simatic_ipc547e_firmware | < r1.30.0 | r1.30.0 |
| siemens | simatic_ipc627d_firmware | < 19.02.11 | 19.02.11 |
| siemens | simatic_ipc647d_firmware | < 19.01.14 | 19.01.14 |
| siemens | simatic_ipc677d_firmware | < 19.02.11 | 19.02.11 |
| siemens | simatic_ipc827d_firmware | < 19.02.11 | 19.02.11 |
| siemens | simatic_ipc847d_firmware | < 19.01.14 | 19.01.14 |
| siemens | simatic_itp1000_firmware | < 23.01.04 | 23.01.04 |
| siemens | simatic_pc547g_firmware | < r1.23.0 | r1.23.0 |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
osv8.8HIGH