CVE-2018-3627 : Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local p

Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.

Published 2018-07-10 21:29:01

Updated 2021-05-08 02:12:49

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Execute code

Exploit prediction scoring system (EPSS) score for CVE-2018-3627

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-3627

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.2	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	1.5	6.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2018-3627

Products affected by CVE-2018-3627

Intel » Converged Security Management Engine Firmware » Version: 11.0
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3 » Version: 6006u
When used together with: Intel » Core I3 » Version: 6098p
When used together with: Intel » Core I3 » Version: 6100
When used together with: Intel » Core I3 » Version: 6100e
When used together with: Intel » Core I3 » Version: 6100h
When used together with: Intel » Core I3 » Version: 6100t
When used together with: Intel » Core I3 » Version: 6100te
When used together with: Intel » Core I3 » Version: 6100u
When used together with: Intel » Core I3 » Version: 6102e
When used together with: Intel » Core I3 » Version: 6157u
When used together with: Intel » Core I3 » Version: 6167u
When used together with: Intel » Core I3 » Version: 6300
When used together with: Intel » Core I3 » Version: 6300t
When used together with: Intel » Core I3 » Version: 6320
When used together with: Intel » Core I3 » Version: 7020u
When used together with: Intel » Core I3 » Version: 7100
When used together with: Intel » Core I3 » Version: 7100e
When used together with: Intel » Core I3 » Version: 7100h
When used together with: Intel » Core I3 » Version: 7100t
When used together with: Intel » Core I3 » Version: 7100u
When used together with: Intel » Core I3 » Version: 7101e
When used together with: Intel » Core I3 » Version: 7101te
When used together with: Intel » Core I3 » Version: 7102e
When used together with: Intel » Core I3 » Version: 7130u
When used together with: Intel » Core I3 » Version: 7167u
When used together with: Intel » Core I3 » Version: 7300
When used together with: Intel » Core I3 » Version: 7300t
When used together with: Intel » Core I3 » Version: 7320
When used together with: Intel » Core I3 » Version: 7350k
When used together with: Intel » Core I3 » Version: 8100
When used together with: Intel » Core I3 » Version: 8100h
When used together with: Intel » Core I3 » Version: 8100t
When used together with: Intel » Core I3 » Version: 8109u
When used together with: Intel » Core I3 » Version: 8130u
When used together with: Intel » Core I3 » Version: 8145u
When used together with: Intel » Core I3 » Version: 8300
When used together with: Intel » Core I3 » Version: 8300t
When used together with: Intel » Core I3 » Version: 8350k
Netapp » Element Software Management Node » Version: N/A
cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-3627

Exploit prediction scoring system (EPSS) score for CVE-2018-3627

CVSS scores for CVE-2018-3627

References for CVE-2018-3627

Products affected by CVE-2018-3627