intel converged-security-management-engine-firmware CVE-2018-3655 vulnerability in Intel Products
Published on September 12, 2018

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

NVD


Products Associated with CVE-2018-3655

Want to know whenever a new CVE is published for Intel products? stack.watch will email you.

Intel Converged Security Management Engine Firmware
 
Intel Server Platform Services Firmware
 
Intel Trusted Execution Engine Firmware
 

Affected Versions

Intel Corporation Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware Version Versions before 11.21.55, 4.0 and 3.1.55. is affected by CVE-2018-3655

Exploit Probability

EPSS
0.17%
Percentile
38.42%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.