CVE-2018-3655

lowpriority · track · 29EPSS 0.005 · 40 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.46% (40th) EPSS

CVSS 3.6 · low

Is it mine?

9 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-28

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

cvss

Technical severity, 0–10. One row per scoring source.

7.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 3.6–7.3

v2.03.6lowAV:L/AC:L/Au:N/C:P/I:P/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 4.9

v3.07.3highCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Nprimary · NVD / NIST USexploitability 0.9 · impact 5.8

v3.06.7mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.17.3highAV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269US

affected products (9)

Products and version ranges known to be affected.

Intel Corporation Intel(R) CSME before version 11.21.55, Intel(R) Server Platform Services before version 4.0 and Intel(R) Trusted Execution Engine Firmware≤ Versions before 11.21.55, 4.0 and 3.1.55.enisa_euvdEU
Intel Corp. Intel Converged Security and Manageability Engine≤ 11.21.55fstec_bduRU
Intel Corp. Intel Server Platform Services≤ 4.0fstec_bduRU
Intel Corp. Intel Trusted Execution Engine Firmware≤ 3.1.55fstec_bduRU
intel converged security management engine firmware11.0 → 11.8.50nvdUScpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
intel converged security management engine firmware11.10 → 11.11.50nvdUScpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
intel converged security management engine firmware11.20 → 11.21.51nvdUScpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
intel server platform services firmware< 4.0nvdUScpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:*
intel trusted execution engine firmware3.0 → 3.1.50nvdUScpe:2.3:o:intel:trusted_execution_engine_firmware:*:*:*:*:*:*:*:*

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2018-09-12modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan