CVE-2018-3655
First published: Wed Sep 12 2018(Updated: )
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Converged Security and Management Engine | >=11.0<=11.8.50 | |
| Intel Converged Security and Management Engine | >=11.10<=11.11.50 | |
| Intel Converged Security and Management Engine | >=11.20<=11.21.51 | |
| Intel Server Platform Services | <4.0 | |
| Intel Trusted Execution Engine | >=3.0<=3.1.50 |
Remedy
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-3655?
CVE-2018-3655 is considered a high severity vulnerability due to the potential for unauthorized information disclosure or modification.
How do I fix CVE-2018-3655?
To address CVE-2018-3655, update to the latest versions of Intel CSME, Intel Server Platform Services, and Intel Trusted Execution Engine Firmware as specified by vendor advisories.
Who is affected by CVE-2018-3655?
CVE-2018-3655 affects users running outdated versions of Intel CSME, Intel Server Platform Services, and Intel Trusted Execution Engine Firmware.
What types of attacks can exploit CVE-2018-3655?
CVE-2018-3655 can be exploited by an unauthenticated user with physical access to modify or disclose sensitive information.
When was CVE-2018-3655 disclosed?
CVE-2018-3655 was publicly disclosed in September 2018.
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel converged security and management engine
- version/intel converged security and management engine/11.0
- version/intel converged security and management engine/11.8.50
- version/intel converged security and management engine/11.10
- version/intel converged security and management engine/11.11.50
- version/intel converged security and management engine/11.20
- version/intel converged security and management engine/11.21.51
- canonical/intel server platform services
- canonical/intel trusted execution engine
- version/intel trusted execution engine/3.0
- version/intel trusted execution engine/3.1.50