CVE-2018-3627

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-3627
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://security.netapp.com/advisory/ntap-20190327-0006/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20190327-0006/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:core_i3:6006u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6098p:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100e:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100te:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6100u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6102e:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6157u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6167u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6300:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6300t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:6320:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7020u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7100:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7100e:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7100h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7100t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7100u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7101e:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7101te:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7102e:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7130u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7167u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7300:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7300t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7320:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:7350k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8100:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8100h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8100t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8109u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8130u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8145u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8300:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8300t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3:8350k:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:core_i5:7y54:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7y57:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6200u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6260u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6267u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6287u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6300hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6300u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6350hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6360u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6400:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6400t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6402p:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6440eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6440hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6442eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6500:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6500t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6500te:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6585r:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6600:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6600k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6600t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:6685r:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7200u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7260u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7267u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7287u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7300hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7300u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7360u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7400:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7400t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7440eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7440hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7442eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7500:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7500t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7600:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7600k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:7600t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8200y:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8250u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8259u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8265u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8269u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8300h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8305g:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8350u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8400:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8400b:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8400h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8400t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8500:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8500b:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8500t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8600:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8600k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5:8600t:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:core_i7:7y75:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6500u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6560u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6567u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6600u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6650u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6660u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6700:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6700hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6700k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6700t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6700te:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6770hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6785r:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6820eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6820hk:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6820hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6822eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6870hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6920hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:6970hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7500u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7560u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7567u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7600u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7660u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7700:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7700hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7700k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7700t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7820eq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7820hk:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7820hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:7920hq:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8086k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8500y:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8550u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8559u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8565u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8650u:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8700:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8700b:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8700k:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8700t:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8705g:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8706g:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8709g:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8750h:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8809g:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7:8850h:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i9:8950hk:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:xeon_e3_1220_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1220_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1225_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1225_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1230_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1230_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1235l_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1240_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1240_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1240l_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1245_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1245_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1260l_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1270_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1270_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1275_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1280_v5:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1280_v6:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_e3_1285_v6:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:intel:converged_security_management_engine_firmware:11.0:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:xeon_w:2123:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2125:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2133:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2135:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2145:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2155:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2175:*:*:*:*:*:*:*
cpe:2.3:h:intel:xeon_w:2195:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*
History

21 Nov 2024, 04:05

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20190327-0006/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20190327-0006/ - Third Party Advisory
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.html - Vendor Advisory
Information

Published : 2018-07-10 21:29

Updated : 2024-11-21 04:05

NVD link : CVE-2018-3627

Mitre link : CVE-2018-3627

CVE.ORG link : CVE-2018-3627

JSON object : View

Products Affected

intel

  • xeon_e3_1225_v6
  • xeon_e3_1220_v6
  • xeon_e3_1270_v6
  • xeon_e3_1280_v6
  • xeon_e3_1220_v5
  • xeon_e3_1240l_v5
  • xeon_e3_1280_v5
  • core_i3
  • xeon_e3_1260l_v5
  • xeon_w
  • core_i9
  • xeon_e3_1235l_v5
  • core_i7
  • xeon_e3_1230_v6
  • xeon_e3_1285_v6
  • xeon_e3_1275_v6
  • converged_security_management_engine_firmware
  • xeon_e3_1225_v5
  • xeon_e3_1230_v5
  • xeon_e3_1245_v5
  • xeon_e3_1240_v6
  • xeon_e3_1270_v5
  • core_i5
  • xeon_e3_1240_v5
  • xeon_e3_1245_v6

netapp

  • element_software_management_node
CWE
NVD-CWE-noinfo