{"id":"CVE-2018-3628","state":"PUBLISHED","title":"Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x ma","description":"Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.","publishedAt":"2018-07-10T21:00:00.000Z","updatedAt":"2024-08-05T04:50:30.347Z","severity":null,"assigner":"intel","products":["Intel Corporation Intel Active Management Technology"],"affected":[{"vendor":"Intel Corporation","product":"Intel Active Management Technology","versions":[{"version":"3.x,4.x,5.x,6.x,7.x,8.x,9.x,10.x,11.x","status":"affected"}]}],"references":["http://www.securitytracker.com/id/1041362","https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us","https://security.netapp.com/advisory/ntap-20190327-0001/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:49.047Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/3xxx/CVE-2018-3628.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-3628","state":"PUBLISHED","datePublished":"2018-07-10T21:00:00.000Z","dateUpdated":"2024-08-05T04:50:30.347Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2017-12-28T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet."}],"affected":[{"vendor":"Intel Corporation","product":"Intel Active Management Technology","versions":[{"version":"3.x,4.x,5.x,6.x,7.x,8.x,9.x,10.x,11.x","status":"affected"}]}],"references":[{"url":"http://www.securitytracker.com/id/1041362","name":"1041362","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0001/","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Elevation of Privilege","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"intel","dateUpdated":"2019-03-27T18:06:08.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce"},"datePublic":"2018-07-10T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","ID":"CVE-2018-3628","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Intel Active Management Technology","version":{"version_data":[{"version_value":"3.x,4.x,5.x,6.x,7.x,8.x,9.x,10.x,11.x"}]}}]},"vendor_name":"Intel Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Elevation of Privilege"}]}]},"references":{"reference_data":[{"name":"1041362","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1041362"},{"name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html","refsource":"CONFIRM","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html"},{"name":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us","refsource":"CONFIRM","url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us"},{"name":"https://security.netapp.com/advisory/ntap-20190327-0001/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20190327-0001/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securitytracker.com/id/1041362","name":"1041362","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00112.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03868en_us","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0001/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T04:50:30.347Z"}}]}}}