What’s Vulnerable › Vulnerabilities
CVE-2018-3657
- Severity: medium (CVSS 6.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-09-12 · updated 2026-06-17
- Weakness: CWE-119
Description
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Affected products
- Intel(R) Active Management Technology (AMT): before 12.0.5 — fixed in 12.0.5
- Intel Corporation Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Techn: from 11.0.0 before 12.0.5 — fixed in 12.0.5
- Intel Corporation Manageability Engine: from 9.0.0.0 before 11.0 — fixed in 11.0
- Siemens Simatic Field Pg M5 Firmware: before 22.01.06 — fixed in 22.01.06
- Siemens Simatic Ipc427E Firmware: before 21.01.09 — fixed in 21.01.09
- Siemens Simatic Ipc477E Firmware: before 21.01.09 — fixed in 21.01.09
- Siemens Simatic Ipc547E Firmware: before r1.30.0 — fixed in r1.30.0
- Siemens Simatic Ipc627D Firmware: before 19.02.11 — fixed in 19.02.11
- Siemens Simatic Ipc647D Firmware: before 19.01.14 — fixed in 19.01.14
- Siemens Simatic Ipc677D Firmware: before 19.02.11 — fixed in 19.02.11
- Siemens Simatic Ipc827D Firmware: before 19.02.11 — fixed in 19.02.11
- Siemens Simatic Ipc847D Firmware: before 19.01.14 — fixed in 19.01.14
- Siemens Simatic Itp1000 Firmware: before 23.01.04 — fixed in 23.01.04
- Siemens Simatic Pc547G Firmware: before r1.23.0 — fixed in r1.23.0
How to fix
Upgrade to a fixed version: Intel(R) Active Management Technology (AMT) 12.0.5; Intel Corporation Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Techn 12.0.5; Intel Corporation Manageability Engine 11.0; Siemens Simatic Field Pg M5 Firmware 22.01.06; Siemens Simatic Ipc427E Firmware 21.01.09; Siemens Simatic Ipc477E Firmware 21.01.09; Siemens Simatic Ipc547E Firmware r1.30.0; Siemens Simatic Ipc627D Firmware 19.02.11; Siemens Simatic Ipc647D Firmware 19.01.14; Siemens Simatic Ipc677D Firmware 19.02.11; Siemens Simatic Ipc827D Firmware 19.02.11; Siemens Simatic Ipc847D Firmware 19.01.14. Check the vendor advisory for mitigations.
References
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
- http://www.securityfocus.com/bid/106996
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://security.netapp.com/advisory/ntap-20180924-0003/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
Get alerted when CVE-2018-3657 or the next vulnerability affects your stack