PT-2018-16102 · Intel · Intel Converged Security/Management Engine

Published 2018-07-10 · Updated 2021-05-08 · CVE-2018-3627

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Converged Security Management Engine versions 11.x

Description A logic bug in the Intel Converged Security Management Engine may allow an attacker to execute arbitrary code via local privileged access.

Recommendations For Intel Converged Security Management Engine versions 11.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-3627

Affected Products

Intel Converged Security/Management Engine

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-3627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3627 · Security Note
• https://security.netapp.com/advisory/ntap-20190327-0006 · Note