CVE-2018-3627
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: NVD
Description
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
Affected (2)
Configuration A
| Running on/with | Platform Versions |
|---|---|
Intel Core I3 | Version 6006u |
Configuration B
| Running on/with | Platform Versions |
|---|---|
Intel Core I5 | Version 6200u |
Configuration C
| Running on/with | Platform Versions |
|---|---|
Intel Core I7 | Version 6500u |
Configuration D
| Running on/with | Platform Versions |
|---|---|
Intel Core I9 | Version 8950hk |
Configuration E
| Running on/with | Platform Versions |
|---|---|
Intel Xeon E3 1220 V5 | All versions |
Intel Xeon E3 1220 V6 | All versions |
Intel Xeon E3 1225 V5 | All versions |
Intel Xeon E3 1225 V6 | All versions |
Intel Xeon E3 1230 V5 | All versions |
Intel Xeon E3 1230 V6 | All versions |
Intel Xeon E3 1235l V5 | All versions |
Intel Xeon E3 1240 V5 | All versions |
Intel Xeon E3 1240 V6 | All versions |
Intel Xeon E3 1240l V5 | All versions |
Intel Xeon E3 1245 V5 | All versions |
Intel Xeon E3 1245 V6 | All versions |
Intel Xeon E3 1260l V5 | All versions |
Intel Xeon E3 1270 V5 | All versions |
Intel Xeon E3 1270 V6 | All versions |
Intel Xeon E3 1275 V6 | All versions |
Intel Xeon E3 1280 V5 | All versions |
Intel Xeon E3 1280 V6 | All versions |
Intel Xeon E3 1285 V6 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.0 |
| Running on/with | Platform Versions |
|---|---|
Intel Xeon W | Version 2123 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
References (4)
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.