PT-2018-1596 · Intel · Intel Csme+1

Published 2018-09-12 · Updated 2023-08-17 · CVE-2018-3657

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel CSME firmware versions prior to 12.0.5

Description The issue is caused by multiple buffer overflows in Intel AMT in Intel CSME firmware, which may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access. This can occur due to a buffer overflow in memory, allowing an attacker to potentially execute arbitrary code.

Recommendations For Intel CSME firmware versions prior to 12.0.5, update to version 12.0.5 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-01153

CVE-2018-3657

Affected Products

Intel Amt

Intel Csme

References · 13

• https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf · Patch
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01153 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-3657 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3657 · Vendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 · Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us · Note
• https://security.netapp.com/advisory/ntap-20180924-0003 · Note
• https://t.me/cvenotify/56788 · Telegram Post
• http://securityfocus.com/bid/106996 · Note
• https://cxsecurity.com/cveshow/CVE-2018-3657 · Note
• https://twitter.com/geekphane/status/1692244116103434598 · Twitter Post