CVE-2018-3655

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

Metrics

CVSS 3.0 7.3/10CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected software

Vendor	Product	Versions
Intel Corporation	Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware	Versions before 11.21.55, 4.0 and 3.1.55.

References

https://security.netapp.com/advisory/ntap-20180924-0003/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_usPatch, Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20180924-0003/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_usPatch, Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.htmlVendor Advisory

Timeline

Published: Sep 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36576.7Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially exec CVE-2018-36585.3Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisione CVE-2018-36596.8A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unau CVE-2018-36615.5Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash t CVE-2018-36628.0Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to CVE-2018-36635.7Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.CVE-2018-36655.6System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local pr CVE-2018-36668.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a CVE-2018-36677.8Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of CVE-2018-36687.8Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbi CVE-2018-36697.5A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthent CVE-2018-36708.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a