Description
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intel | Intel(R) Active Management Technology | Versions before 12.0.5. | — |
Advisories 1
- ICSA-19-043-05 Siemens Intel Active Management Technology of SIMATIC IPCs CISA ICS & IT advisories · Feb 10, 2020
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html
- 106996 vdb-entry
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_us
- https://security.netapp.com/advisory/ntap-20180924-0003/