CVE-2018-3643

Vulnerability

A vulnerability exists in the Power Management Controller firmware within systems using specific Intel Converged Security and Management Engine (CSME) versions prior to 11.8.55, 11.11.55, 11.21.55, 12.0.6, or Intel Server Platform Services (SPS) firmware versions prior to 4.x.04. The issue allows an attacker with administrative privileges to potentially uncover certain platform secrets or execute arbitrary code via local access [1].

Exploitation

An attacker must already have administrative privileges on the target system and local access to the machine. The exploitation does not require user interaction beyond the attacker's own actions. The attack vector is local, meaning the adversary must be able to interact physically or through a local terminal with the system software [1].

Impact

Successful exploitation could lead to disclosure of platform secrets (confidentiality breach) or arbitrary code execution (integrity and availability impact). The attacker could gain further control over the platform beyond their administrative privileges, potentially affecting the security of the entire system [1].

Mitigation

Intel has released firmware updates: Intel CSME versions 11.8.55, 11.11.55, 11.21.55, 12.0.6, and Intel SPS version 4.x.04 or later. System administrators should apply these updates from the respective system vendor. No workarounds are mentioned in the advisory [1].