CVE-2018-3643 - CVE House

Back to Database

Status published High CVE-2018-3643

A vulnerability in Power Management Controller firmware in systems using...

8.2 CVSS

Vulnerability Description

A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-3643

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Intel Corporation

View All →

Improper access control in the Intel(R) Processor Diagnostic Tool before...

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...

Improper permissions for Intel(R) USB 3.0 Creator Utility all versions...

Double free in Intel(R) SGX SDK for Linux before version...

Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before...

Affected Vendor

Intel Corporation

View all reports →

Affected Software

Intel(R) Converged Security and Management Engine (CSME) and Intel(R) Server Platform Services firmware

Vulnerable Versions:

CSME versions before 12.0.6 or Server Platform Services firmware before version 4.x.04.

Timeline

Official Publish: September 12th, 2018

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.