CVE-2018-3657: Intel Active Management Technology Firmware

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.

Affected products

• Intel Active Management Technology Firmware: before 12.0.5 (fixed in 12.0.5)
• Intel Converged Security Management Engine Firmware: from 11.0.0, before 12.0.5 (fixed in 12.0.5)
• Intel Manageability Engine Firmware: from 9.0.0.0, before 11.0 (fixed in 11.0)
• Siemens SIMATIC Field Pg m5 Firmware: before 22.01.06 (fixed in 22.01.06)
• Siemens SIMATIC IPC427E Firmware: before 21.01.09 (fixed in 21.01.09)
• Siemens SIMATIC IPC477E Firmware: before 21.01.09 (fixed in 21.01.09)
• Siemens SIMATIC IPC547E Firmware: before r1.30.0 (fixed in r1.30.0)
• Siemens SIMATIC IPC627D Firmware: before 19.02.11 (fixed in 19.02.11)
• Siemens SIMATIC IPC647D Firmware: before 19.01.14 (fixed in 19.01.14)
• Siemens SIMATIC IPC677D Firmware: before 19.02.11 (fixed in 19.02.11)
• Siemens SIMATIC IPC827D Firmware: before 19.02.11 (fixed in 19.02.11)
• Siemens SIMATIC IPC847D Firmware: before 19.01.14 (fixed in 19.01.14)
• Siemens SIMATIC ITP1000 Firmware: before 23.01.04 (fixed in 23.01.04)
• Siemens SIMATIC PC547G Firmware: before r1.23.0 (fixed in r1.23.0)

Published 2018-09-12. Last modified 2026-06-17.