CVE-2018-3616 Vulnerability Details

  /     /     /  

CVE-2018-3616 Metadata Quick Info

CVE Published: 12/09/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: intel | Vendor: Intel Corporation | Product: Intel(R) Active Management Technology
Status : PUBLISHED

---

CVE-2018-3616 Description

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Denial of Service, Information Disclosure
Source: Intel Corporation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).