Converged Security Management Engine Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-12	CVE-2018-3655	Unspecified vulnerability in Intel products A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access. local low complexity intel	3.6
2018-09-12	CVE-2018-3643	Unspecified vulnerability in Intel products A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code. local low complexity intel	4.6
2018-09-12	CVE-2018-3616	Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network. network high complexity intel siemens	5.9
2018-07-10	CVE-2018-3627	Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access. local low complexity intel netapp	4.6