CVE-2018-3655 A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an u...
HighCVSS 7.3
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel converged security management engine firmware | >= 11.0, <= 11.8.50 | No fix listed |
| intel converged security management engine firmware | >= 11.10, <= 11.11.50 | No fix listed |
| intel converged security management engine firmware | >= 11.20, <= 11.21.51 | No fix listed |
| intel server platform services firmware | < 4.0 | 4.0 |
| intel trusted execution engine firmware | >= 3.0, <= 3.1.50 | No fix listed |
| Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware | = Versions before 11.21.55, 4.0 and 3.1.55. | No fix listed |
References
- security.netapp.com
- support.hpe.com patch third-party-advisory
- www.intel.com vendor-advisory