CVE-2018-3655

high

Description

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us

https://security.netapp.com/advisory/ntap-20180924-0003/

Details

Source: Mitre, NVD

Published: 2018-09-12

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N

Severity: Low

CVSS v3

Base Score: 7.3

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Severity: High

EPSS

EPSS: 0.00217