CVE-2017-5711

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
VendorProductVersion
intelmanageability_engine_firmware
8.0.0.0 ≤
𝑥
≤ 8.1.71.3608
intelmanageability_engine_firmware
9.0.0.0 ≤
𝑥
≤ 9.1.41.3024
intelmanageability_engine_firmware
10.0.0.0 ≤
𝑥
≤ 10.0.55.3000
intelmanageability_engine_firmware
11.0
intelmanageability_engine_firmware
11.5
intelmanageability_engine_firmware
11.6
intelmanageability_engine_firmware
11.7
intelmanageability_engine_firmware
11.10
intelmanageability_engine_firmware
11.20
intelactive_management_technology_firmware
-
asusz170-premium_firmware
-
asusz170-deluxe_firmware
-
asusz170-pro_firmware
-
asusz170-a_firmware
-
asusz170-ar_firmware
-
asusz170-e_firmware
-
asusz170-k_firmware
-
asusz170-p_firmware
-
asusz170m-plus_firmware
-
asusz170m-plus\/br_firmware
-
asusz170-p_d3_firmware
-
asusz170m-e_d3_firmware
-
asussabertooth_z170_mark_1_firmware
-
asussabertooth_z170_s_firmware
-
asusrog_maximus_viii_extreme_firmware
-
asusrog_maximus_viii_ranger_firmware
-
asusrog_maximus_viii_formula_firmware
-
asusrog_maximus_viii_hero_firmware
-
asusrog_maximus_viii_hero_alpha_firmware
-
asusrog_maximus_viii_gene_firmware
-
asusrog_maximus_viii_impact_firmware
-
asusz170i_pro_gaming_firmware
-
asusz170_pro_gaming_firmware
-
asusz170_pro_gaming\/aura_firmware
-
asusb150_pro_gaming_firmware
-
asusb150_pro_gaming\/aura_firmware
-
asusb150i_pro_gaming\/wifi\/aura_firmware
-
asusb150i_pro_gaming\/aura_firmware
-
asusb150m_pro_gaming_firmware
-
asusb150m-a_firmware
-
asusb150m-a_d3_firmware
-
asusb150m-c_d3_firmware
-
asusb150-a_firmware
-
asusb150m-d_firmware
-
asusb150m-k_firmware
-
asusb150m-plus_firmware
-
asusb150m-f_plus_firmware
-
asusb150-plus_firmware
-
asusb150m-v_plus_firmware
-
asusex-b150m-v_firmware
-
asusex-b150m-v3_firmware
-
asusex-b150m-v5_firmware
-
asusex-b150-v7_firmware
-
asusb150-pro_firmware
-
asusb150m-a\/m.2_firmware
-
asusb150m-c_firmware
-
asusb150m-c\/br_firmware
-
asuspio-b150m_firmware
-
asustrooper_b150_d3_firmware
-
asusb150m-plus_d3_firmware
-
asusb150_pro_gaming_d3_firmware
-
asusb150m-k_d3_firmware
-
asusb150-pro_d3_firmware
-
asusex-h110m-v_firmware
-
asusex-h110m-v3_firmware
-
asush110i-plus_firmware
-
asush110m-a\/dp_firmware
-
asush110m-c_firmware
-
asush110m-c\/br_firmware
-
asush110m-c\/hdmi_firmware
-
asush110m-c\/ps_firmware
-
asush110m-c2_firmware
-
asush110m-c2\/tf_firmware
-
asush110m-cs_firmware
-
asush110m-cs_x_firmware
-
asush110m-cs\/br_firmware
-
asush110m-d\/exper\/si_firmware
-
asush110m-k_x_firmware
-
asush110m-ks_firmware
-
asush110m-ks_r1_firmware
-
asush110m-p\/dvi_firmware
-
asush110m-ts_firmware
-
asush110-plus_firmware
-
asush110s1_firmware
-
asush110s2_firmware
-
asush110t_firmware
-
asush110t-a_firmware
-
asush110m-a\/m.2_firmware
-
asush110m-d_firmware
-
asush110m-e_firmware
-
asush110m-e\/m.2_firmware
-
asush110m-f_firmware
-
asush110m-k_firmware
-
asush110m-a_firmware
-
asustrooper_h110_d3_firmware
-
asush110m-plus_firmware
-
asush110m-r_firmware
-
asusprime_h110m2_firmware
-
asusprime_h110m2\/fpt_firmware
-
asusprime_h110m-p_firmware
-
asush110m-k_d3_firmware
-
asush110m-a_d3_firmware
-
asush170-pro_firmware
-
asush170i-pro_firmware
-
asush170_pro_gaming_firmware
-
asush170m-plus_firmware
-
asush170-pro\/usb_3.1_firmware
-
asush170m-plus\/br_firmware
-
asush170-plus_d3_firmware
-
asush170m-e_d3_firmware
-
asusex-b250-v7_firmware
-
asusb250_mining_expert_firmware
-
asusprime_b250m-d_firmware
-
asusprime_b250-a_firmware
-
asusprime_b250m-a_firmware
-
asusprime_b250m-j_firmware
-
asusprime_b250m-plus_firmware
-
asusprime_b250-plus_firmware
-
asusprime_b250m-k_firmware
-
asusprime_b250-pro_firmware
-
asusrog_strix_b250i_gaming_firmware
-
asusrog_strix_b250g_gaming_firmware
-
asusrog_strix_b250h_gaming_firmware
-
asusrog_strix_b250f_gaming_firmware
-
asusb250m-c_pro_firmware
-
asusb250m-f_plus_firmware
-
asusb250-mr_firmware
-
asusb250-s_firmware
-
asusex-b250m-v_firmware
-
asusex-b250m-v3_firmware
-
asusex-b250m-v5_firmware
-
asuspio-b250i_firmware
-
asusprime_b250m-c_firmware
-
asusprime_b250m-plus\/br_firmware
-
asusprime_h270-pro_firmware
-
asusprime_h270-plus_firmware
-
asusrog_strix_h270i_gaming_firmware
-
asusrog_strix_h270f_gaming_firmware
-
asusprime_h270m-plus_firmware
-
asusrog_maximus_ix_extreme_firmware
-
asusrog_maximus_ix_formula_firmware
-
asusrog_maximus_ix_code_firmware
-
asusrog_maximus_ix_apex_firmware
-
asusrog_maximus_ix_hero_firmware
-
asusprime_z270-a_firmware
-
asusprime_z270-ar_firmware
-
asusrog_strix_z270e_gaming_firmware
-
asusrog_strix_z270f_gaming_firmware
-
asusrog_strix_z270g_gaming_firmware
-
asusrog_strix_z270h_gaming_firmware
-
asustuf_z270_mark_1_firmware
-
asustuf_z270_mark_2_firmware
-
asusrog_strix_z270h_gaming\/k1_firmware
-
asusprime_z270-k_firmware
-
asusprime_z270-p_firmware
-
asusrog_strix_z270i_gaming_firmware
-
asusprime_z270m-plus_firmware
-
asusprime_z270m-plus\/br_firmware
-
asusq170m-c_firmware
-
asusq170m-cm-b_firmware
-
asusq170s1_firmware
-
asusq170t_firmware
-
asusq170t_v2_firmware
-
asusq170m2_firmware
-
asusq170m2\/cdm\/si_firmware
-
asusprime_q270m-c_firmware
-
asusq270m-cm-a_firmware
-
asusq270-s_firmware
-
asusprime_j3355i-c_firmware
-
asusrog_maximus_x_hero_firmware
-
asusrog_maximus_x_formula_firmware
-
asusrog_maximus_x_code_firmware
-
asusrog_maximus_x_apex_firmware
-
asusprime_z370-a_firmware
-
asusprime_z370-p_firmware
-
asustuf_z370-pro_gaming_firmware
-
asustuf_z370-plus_gaming_firmware
-
asusrog_strix_z370-g_gaming_firmware
-
asusrog_strix_z370-e_gaming_firmware
-
asusrog_strix_z370-f_gaming_firmware
-
asusrog_strix_z370-h_gaming_firmware
-
asusrog_strix_z370-i_gaming_firmware
-
siemenssimatic_field_pg_m3_firmware
𝑥
< 6.2.61.3535
siemenssimatic_field_pg_m4_firmware
𝑥
< 18.01.06
siemenssimatic_field_pg_m5_firmware
𝑥
< 22.01.04
siemenssimatic_ipc677c_firmware
𝑥
< 6.2.61.3535
siemenssimatic_ipc427d_firmware
-
siemenssimatic_ipc427e_firmware
𝑥
< 21.01.07
siemenssimatic_ipc477d_firmware
-
siemenssimatic_ipc477d_pro_firmware
-
siemenssimatic_ipc477e_firmware
𝑥
< 21.01.07
siemenssimatic_ipc547d_firmware
𝑥
< 7.1.91.3272
siemenssimatic_ipc547e_firmware
𝑥
< 9.1.41.3024
siemenssimatic_ipc627c_firmware
𝑥
< 6.2.61.3535
siemenssimatic_ipc627d_firmware
𝑥
< 9.1.41.3024
siemenssimatic_ipc647c_firmware
𝑥
< 6.2.61.3535
siemenssimatic_ipc647d_firmware
𝑥
< 9.1.41.3024
siemenssimatic_ipc677d_firmware
𝑥
< 9.1.41.3024
siemenssimatic_ipc827c_firmware
𝑥
< 6.2.61.3535
siemenssimatic_ipc827d_firmware
𝑥
< 9.1.41.3024
siemenssimatic_ipc847c_firmware
𝑥
< 6.2.61.3535
siemenssimatic_ipc847d_firmware
𝑥
< 9.1.41.3024
siemenssimatic_itp1000_firmware
𝑥
< 23.01.03
siemenssimotion_p320-4s_firmware
𝑥
< 17.02.06.83.1
siemenssinumerik_pcu50.5-c_firmware
𝑥
< 6.2.61.3535
siemenssinumerik_pcu50.5-p_firmware
𝑥
< 6.2.61.3535
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
intel-microcode
artful
not-affected
zesty
not-affected
xenial
not-affected
trusty
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101918
http://www.securitytracker.com/id/1039852
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
https://security.netapp.com/advisory/ntap-20171120-0001/
https://www.asus.com/News/wzeltG5CjYaIwGJ0
http://www.securityfocus.com/bid/101918
http://www.securitytracker.com/id/1039852
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
https://security.netapp.com/advisory/ntap-20171120-0001/
https://www.asus.com/News/wzeltG5CjYaIwGJ0