CVE-2018-3629 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Intel Active Management Technology Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 36.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Active Management Technology FirmwareIntel Corporation Intel Active Management Technology
Timeline
PublishedJul 10
Latest updateMay 13

Description

Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5intel_corporation/intel_active_management_technology3.x,4.x,5.x,6.x,7.x,8.x,9.x,10.x,11.x

🔴Vulnerability Details

2
GHSA
GHSA-ww6j-cx8j-c366: Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3↗2022-05-13
▶
CVEList
CVE-2018-3629: Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3↗2018-07-10
▶
CVE-2018-3629 — Intel vulnerability | cvebase