CVE-2018-3616

CVE-2018-3616: falha em Intel(R) Active Management Technology

Publicada em 12 set 2018 · Atualizada em 16 set 2024

Seguir esta CVE + Monitorar Intel Active Management Technology

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.4%

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Produtos afetados

Intel Corporation · Intel(R) Active Management Technology

CVEs relacionadas — Intel(R) Active Management Technology

No mesmo produto, das mais perigosas para as menos.

CVE-2018-3658—CVE-2018-3658EPSS 3.3%CVE-2018-3657—CVE-2018-3657EPSS 0.6%

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 https://security.netapp.com/advisory/ntap-20180924-0003/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html http://www.securityfocus.com/bid/106996