CVE:CVE-2018-3643
CNNVD:CNNVD-201809-607
Intel Atom Processor C3000 Series Platform等都是美国英特尔（Intel）公司的处理器产品。Intel Power Management Controller是其中的一款电源管理控制器。
Intel Power Management Controller中存在安全漏洞。本地攻击者可利用该漏洞提升权限或泄露信息。以下产品受到影响：Intel Atom Processor C3000 Series Platform，Xeon D-2100 Processor Family Platform，Xeon Scalable Processor Family Platforms，C620 Series Chipset Family (PCIe End Point Mode)，QuickAssist Adapter 8960/8970 Products（使用Server Platform Services固件4.x版本）；6th、7th、8th Generation Intel Core Processor Family Platforms，Xeon E3-1200/1500 v5 Processor Family Platforms，Xeon? E3-1200/1500 v6 Processor Family Platforms，Xeon? W Processor Family Platform，Core X-Series Processor Family Platform，Xeon Scalable Processors（CSME固件11.x及之后版本）。
solution:Upgrade intel converged_security_management_engine_firmware to a higher version than 12.0.6,and avoid the version (,12.0.6); Upgrade intel server_platform_services_firmware to a higher version than 4.00.04,and avoid the version (,4.00.04)