CVE-2018-3616

—

CVSS 3.1

5.9 medium

EPSS

2%p83

Published

Sep 12, 2018 (Sep 12, 2018)

Modified

Jun 17, 2026

Description

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Vendors: intel siemens
Products: converged security management engine firmware, active management technology firmware, manageability engine firmware, simatic field pg m5 firmware, simatic ipc427e firmware, simatic ipc477e firmware, simatic ipc547e firmware, simatic pc547g firmware, simatic ipc627d firmware, simatic ipc647d firmware, simatic ipc677d firmware, simatic ipc827d firmware
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.