Siemens Intel Active Management Technology of SIMATIC IPCs

Vulnerabilities 3

• Unscored —
  CVE-2018-3616

  Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0…

  Intel Intel(R) Active Management Technology
  Sep 12, 2018
• Unscored —
  CVE-2018-3657

  Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged use…

  Intel Intel(R) Active Management Technology
  Sep 12, 2018
• Unscored —
  CVE-2018-3658

  Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with…

  Intel Intel(R) Active Management Technology
  Sep 12, 2018

Revision history

1. 2020-02-10 #2

   SIPLUS devices now explicitly mentioned in the list of affected products

2. 2019-02-12 #1

   Publication Date

References

• SSA-377318: Multiple vulnerabilities in Intel Active Management Technology (AMT) of SIMATIC IPCs - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-377318.html
• ICS Advisory ICSA-19-043-05 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-043-05
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B