Detections
Analytics
Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00112)
high Nessus Plugin ID 111227
Language:
Synopsis
The management engine on the remote host is affected by multiple vulnerabilities.Description
The Intel Converged Security Management Engine (CSME) on the remote host is affected by multiple vulnerabilities in the Active Management Technology (AMT) feature.Note that due to the low-level implementation of Intel ME, Nessus may not be able to identify its version on the remote host at this time.
Solution
Contact your system OEM for updated firmware per the vendor advisory.See Also
Plugin Details
Severity: High
ID: 111227
File Name: wmi_INTEL-SA-00112.nbin
Version: 1.149
Type: local
Agent: windows
Family: Windows
Published: 7/23/2018
Updated: 11/22/2024
Configuration: Enable paranoid mode
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.1
Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2018-3628
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/h:intel:active_management_technology, cpe:/o:intel:active_management_technology_firmware
Required KB Items: Intel/AMT/Enabled, SMB/Services/Enumerated, Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 7/10/2018
Vulnerability Publication Date: 7/10/2018