intel converged-security-management-engine-firmware CVE-2018-3616 vulnerability in Intel Products
Published on September 12, 2018

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

NVD


Products Associated with CVE-2018-3616

Want to know whenever a new CVE is published for Intel products? stack.watch will email you.

Intel Converged Security Management Engine Firmware
 
Intel Manageability Engine Firmware
 
Intel Active Management Technology Firmware
 

Affected Versions

Intel Corporation Intel(R) Active Management Technology Version Versions before 12.0.5. is affected by CVE-2018-3616

Exploit Probability

EPSS
1.55%
Percentile
81.16%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.