Back to feed
EUVD-2018-15511 · Published Sep 12, 2018
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Technologies
Siemens Simatic Field Pg M5Siemens Simatic Ipc647D FirmwareSiemens Simatic Ipc627DIntel Active Management Technology FirmwareSiemens Simatic Field Pg M5 FirmwareSiemens Simatic Itp1000Siemens Simatic Ipc847D FirmwareSiemens Simatic Pc547ESiemens Simatic Ipc427E FirmwareSiemens Simatic Pc547G FirmwareSiemens Simatic Ipc847DIntel Converged Security Management Engine FirmwareSiemens Simatic Ipc827D FirmwareSiemens Simatic Ipc547GSiemens Simatic Ipc827DSiemens Simatic Ipc477ESiemens Simatic Ipc677D FirmwareIntel Manageability Engine FirmwareSiemens Simatic Itp1000 FirmwareSiemens Simatic Ipc427ESiemens Simatic Ipc627D FirmwareSiemens Simatic Ipc477E FirmwareSiemens Simatic Ipc647DSiemens Simatic Ipc677DSiemens Simatic Ipc547E Firmware
Weaknesses
CWE-119
CVSS scores
- v3.16.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
Potentially impacted assets
See if this affects your attack surface
