CVE-2018-3628 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Intel Active Management Technology Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.4%
top 38.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Active Management Technology FirmwareIntel Corporation Intel Active Management Technology
Timeline
PublishedJul 10
Latest updateMay 13

Description

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel_corporation/intel_active_management_technology3.x,4.x,5.x,6.x,7.x,8.x,9.x,10.x,11.x

🔴Vulnerability Details

2
GHSA
GHSA-8p5q-cf3f-8vq4: Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3↗2022-05-13
▶
CVEList
CVE-2018-3628: Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3↗2018-07-10
▶
CVE-2018-3628 — Intel vulnerability | cvebase