CVE-2018-3629
Last modified
CVE-2018-3629 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.. EPSS estimates a 0.98% chance of exploitation in the next 30 days.
Description
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Active Management Technology Firmware | >= 3.0, <= 11.22.70 |
References
- http://www.securitytracker.com/id/1041362Third Party Advisory, VDB Entry
- https://security.netapp.com/advisory/ntap-20190327-0001/Third Party Advisory
- http://www.securitytracker.com/id/1041362Third Party Advisory, VDB Entry
- https://security.netapp.com/advisory/ntap-20190327-0001/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-3629?
How severe is CVE-2018-3629?
How do I fix CVE-2018-3629?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-3623Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-3624Buffer overflow in ETWS processing module Intel XMM71xx, XMM…
- CVE-2018-3625Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-3626Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linu…
- CVE-2018-3627Logic bug in Intel Converged Security Management Engine 11.x…8.2
- CVE-2018-3628Buffer overflow in HTTP handler in Intel Active Management T…8.8
- CVE-2018-3630Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-3631Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-3632Memory corruption in Intel Active Management Technology in I…6.7
- CVE-2018-3633Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-3634Parameter corruption in NDIS filter driver in Intel Online C…5.5
- CVE-2018-3635Insufficient input validation in installer in Intel Rapid St…7.8
Are you affected by CVE-2018-3629?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
