Description
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Intel Corporation Intel(R) Active Management Technology
Versions before 12.0.5.affected
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf ↗
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05 ↗
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html ↗
- http://www.securityfocus.com/bid/106996 ↗
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us ↗
- https://security.netapp.com/advisory/ntap-20180924-0003/ ↗