NetSight
IP …
medium5.9

CVE-2018-3616

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to …

Impact

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Affected products

VendorProductAffected versions
IntelConverged Security Management Engine Firmware
from 11.0.0 before 12.0.5
IntelActive Management Technology Firmware
before 12.0.5
IntelManageability Engine Firmware
from 9.0.0.0 before 11.0
SiemensSimatic Field Pg M5 Firmware
before 22.01.06
SiemensSimatic Ipc427e Firmware
before 21.01.09
SiemensSimatic Ipc477e Firmware
before 21.01.09
SiemensSimatic Ipc547e Firmware
before r1.30.0
SiemensSimatic Pc547g Firmware
before r1.23.0
SiemensSimatic Ipc627d Firmware
before 19.02.11
SiemensSimatic Ipc647d Firmware
before 19.01.14
SiemensSimatic Ipc677d Firmware
before 19.02.11
SiemensSimatic Ipc827d Firmware
before 19.02.11

References