5.9

CVE-2018-3616

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Manageability Engine Firmware Version >= 9.0.0.0 < 11.0
Siemens ≫ Simatic Field Pg M5 Firmware Version < 22.01.06
   Siemens ≫ Simatic Field Pg M5 Version -
Siemens ≫ Simatic Ipc427e Firmware Version < 21.01.09
   Siemens ≫ Simatic Ipc427e Version -
Siemens ≫ Simatic Ipc477e Firmware Version < 21.01.09
   Siemens ≫ Simatic Ipc477e Version -
Siemens ≫ Simatic Ipc547e Firmware Version < r1.30.0
   Siemens ≫ Simatic Pc547e Version -
Siemens ≫ Simatic Pc547g Firmware Version < r1.23.0
   Siemens ≫ Simatic Ipc547g Version -
Siemens ≫ Simatic Ipc627d Firmware Version < 19.02.11
   Siemens ≫ Simatic Ipc627d Version -
Siemens ≫ Simatic Ipc647d Firmware Version < 19.01.14
   Siemens ≫ Simatic Ipc647d Version -
Siemens ≫ Simatic Ipc677d Firmware Version < 19.02.11
   Siemens ≫ Simatic Ipc677d Version -
Siemens ≫ Simatic Ipc827d Firmware Version < 19.02.11
   Siemens ≫ Simatic Ipc827d Version -
Siemens ≫ Simatic Ipc847d Firmware Version < 19.01.14
   Siemens ≫ Simatic Ipc847d Version -
Siemens ≫ Simatic Itp1000 Firmware Version < 23.01.04
   Siemens ≫ Simatic Itp1000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.39% 0.818
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/106996
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
Patch
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
Third Party Advisory
US Government Resource
https://security.netapp.com/advisory/ntap-20180924-0003/
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
Vendor Advisory