CVE-2018-3655

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:05

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20180924-0003/ - () https://security.netapp.com/advisory/ntap-20180924-0003/ -
References () https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us - Patch, Third Party Advisory () https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us - Patch, Third Party Advisory
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html - Vendor Advisory

Information

Published : 2018-09-12 19:29

Updated : 2024-11-21 04:05


NVD link : CVE-2018-3655

Mitre link : CVE-2018-3655

CVE.ORG link : CVE-2018-3655


JSON object : View

Products Affected

intel

  • server_platform_services_firmware
  • converged_security_management_engine_firmware
  • trusted_execution_engine_firmware