CVE:CVE-2018-3616
CNNVD:CNNVD-201809-608
Intel Active Management Technology（AMT）是美国英特尔（Intel）公司的一款集成在Intel芯片中，使用了主动管理技术的嵌入式系统。
Intel AMT 12.0.5之前版本中的TLS实现存在安全漏洞。攻击者可借助网络利用该漏洞获取TLS会话密钥。
solution:Upgrade intel converged_security_management_engine_firmware to a higher version than 12.0.5,and avoid the version [11.0.0,12.0.5); Upgrade intel active_management_technology_firmware to a higher version than 12.0.5,and avoid the version (,12.0.5); Upgrade intel manageability_engine_firmware to a higher version than 11.0,and avoid the version [9.0.0.0,11.0); Upgrade siemens simatic_field_pg_m5_firmware to a higher version than 22.01.06,and avoid the version (,22.01.06); Upgrade siemens simatic_ipc427e_firmware to a higher version than 21.01.09,and avoid the version (,21.01.09); Upgrade siemens simatic_ipc477e_firmware to a higher version than 21.01.09,and avoid the version (,21.01.09); Upgrade siemens simatic_ipc547e_firmware to a higher version than r1.30.0,and avoid the version (,r1.30.0); Upgrade siemens simatic_pc547g_firmware to a higher version than r1.23.0,and avoid the version (,r1.23.0); Upgrade siemens simatic_ipc627d_firmware to a higher version than 19.02.11,and avoid the version (,19.02.11); Upgrade siemens simatic_ipc647d_firmware to a higher version than 19.01.14,and avoid the version (,19.01.14); Upgrade siemens simatic_ipc677d_firmware to a higher version than 19.02.11,and avoid the version (,19.02.11); Upgrade siemens simatic_ipc827d_firmware to a higher version than 19.02.11,and avoid the version (,19.02.11); Upgrade siemens simatic_ipc847d_firmware to a higher version than 19.01.14,and avoid the version (,19.01.14); Upgrade siemens simatic_itp1000_firmware to a higher version than 23.01.04,and avoid the version (,23.01.04)