CVE-2018-3655: intel corporation intel(r) csme before version 11.21.55, intel(r) server platform services before version 4.0 and intel(r) trusted execution engine firmware
Vulnerability summary
CVE-2018-3655 is a high (CVSS 7.3) vulnerability in intel corporation intel(r) csme before version 11.21.55, intel(r) server platform services before version 4.0 and intel(r) trusted execution engine firmware. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.7% of scored vulnerabilities.
Timeline
- 12-09-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Intel3 products
- converged_security_management_engine_firmware≥ 11.0, ≤ 11.8.50 | ≥ 11.10, ≤ 11.11.50 | ≥ 11.20, ≤ 11.21.51
- server_platform_services_firmware< 4.0
- trusted_execution_engine_firmware≥ 3.0, ≤ 3.1.50
Intel corporation1 product
- intel(r) csme before version 11.21.55, intel(r) server platform services before version 4.0 and intel(r) trusted execution engine firmwareVersions before 11.21.55, 4.0 and 3.1.55.
2 vendors · 4 products
References
3 links- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.htmlX Refsource CONFIRMVendor Advisory
- support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_usX Refsource CONFIRMPatchThird Party Advisory
- security.netapp.com/advisory/ntap-20180924-0003/X Refsource CONFIRM