medium5.3
CVE-2018-3658
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially ca…
Impact
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Field Pg M5 Firmware | before 22.01.06 |
| Siemens | Simatic Ipc427e Firmware | before 21.01.09 |
| Siemens | Simatic Ipc477e Firmware | before 21.01.09 |
| Siemens | Simatic Ipc547e Firmware | before r1.30.0 |
| Siemens | Simatic Pc547g Firmware | before r1.23.0 |
| Siemens | Simatic Ipc627d Firmware | before 19.02.11 |
| Siemens | Simatic Ipc647d Firmware | before 19.01.14 |
| Siemens | Simatic Ipc677d Firmware | before 19.02.11 |
| Siemens | Simatic Ipc827d Firmware | before 19.02.11 |
| Siemens | Simatic Ipc847d Firmware | before 19.01.14 |
| Siemens | Simatic Itp1000 Firmware | before 23.01.04 |
| Intel | Converged Security Management Engine Firmware | from 11.0.0 before 12.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html