CVE:CVE-2018-3655
CNNVD:CNNVD-201809-606
Intel CSME、Intel Server Platform Services和Intel Trusted Execution Engine都是美国英特尔（Intel）公司的产品。Intel CSME是一款融合安全管理引擎。Intel Server Platform Services是一个服务器平台服务。Intel Trusted Execution Engine是一款使用在CPU（中央处理器）中具有硬件验证功能的信任执行引擎。
Intel CSME 11.21.55之前版本、Intel Server Platform Services 4.0之前版本和Intel Trusted Execution Engine固件3.1.55之前版本中的子系统存在安全漏洞。物理位置临近的攻击者可利用该漏洞修改或泄露信息。
solution:Upgrade intel converged_security_management_engine_firmware to a higher version than 11.8.50,11.11.50,11.21.51,and avoid the version [11.0,11.8.50],[11.10,11.11.50],[11.20,11.21.51]; Upgrade intel server_platform_services_firmware to a higher version than 4.0,and avoid the version (,4.0); Upgrade intel trusted_execution_engine_firmware to a higher version than 3.1.50,and avoid the version [3.0,3.1.50]