CVE-2018-3627

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Intel Corporation	Intel Converged Security Management Engine (Intel CSME)	11.x

References

https://security.netapp.com/advisory/ntap-20190327-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20190327-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00118.htmlVendor Advisory

Timeline

Published: Jul 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36288.8Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.CVE-2018-36296.5Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5 CVE-2018-36326.7Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10 CVE-2018-36345.5Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local CVE-2018-36357.8Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to poten CVE-2018-36387.8Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a priv CVE-2018-36395.5Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior mem CVE-2018-36405.6Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized d CVE-2018-36419.8Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.CVE-2018-36438.2A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) b CVE-2018-36457.8Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboa CVE-2018-36465.6Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information resid