Vulnerability Details : CVE-2017-5712
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2017-5712
Probability of exploitation activity in the next 30 days: 1.20%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 84 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2017-5712
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST |
7.2
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
1.2
|
5.9
|
NIST |
CWE ids for CVE-2017-5712
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-5712
-
https://security.netapp.com/advisory/ntap-20171120-0001/
Intel SA-00086 Management Engine Vulnerabilities in NetApp Products | NetApp Product SecurityIssue Tracking;Third Party Advisory
-
http://www.securitytracker.com/id/1039852
Intel Management Engine Multiple Flaws Let Remote Authenticated Users and Local Users Gain Elevated Privileges - SecurityTrackerIssue Tracking;Third Party Advisory;VDB Entry
-
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
INTEL-SA-00086Issue Tracking;Vendor Advisory
-
http://www.securityfocus.com/bid/101920
Intel Manageability Engine CVE-2017-5712 Remote Buffer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
https://www.asus.com/News/wzeltG5CjYaIwGJ0
ASUS Motherboards Statement on Intel ME/TXE AdvisoryThird Party Advisory
-
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
Third Party Advisory
Products affected by CVE-2017-5712
- cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simotion_p320-4s_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477d_pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:sinumerik_pcu50.5-c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:intel:active_management_technology_firmware:-:*:*:*:*:*:*:*
- Intel » Manageability Engine FirmwareVersions from including (>=) 9.0.0.0 and up to, including, (<=) 9.1.41.3024cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- Intel » Manageability Engine FirmwareVersions from including (>=) 8.0.0.0 and up to, including, (<=) 8.1.71.3608cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- Intel » Manageability Engine FirmwareVersions from including (>=) 10.0.0.0 and up to, including, (<=) 10.0.55.3000cpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*
- cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-premium_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-deluxe_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-ar_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-k_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170m-plus\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170-p_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170m-e_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:sabertooth_z170_mark_1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:sabertooth_z170_s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_extreme_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_ranger_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_formula_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_hero_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_hero_alpha_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_gene_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_viii_impact_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170i_pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170_pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:z170_pro_gaming\/aura_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150_pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150_pro_gaming\/aura_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150i_pro_gaming\/wifi\/aura_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150i_pro_gaming\/aura_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m_pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-a_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-c_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-k_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-f_plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-v_plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b150m-v_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b150m-v3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b150m-v5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b150-v7_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-a\/m.2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-c\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:pio-b150m_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:trooper_b150_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-plus_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150_pro_gaming_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150m-k_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b150-pro_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-h110m-v_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-h110m-v3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110i-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-a\/dp_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c\/hdmi_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c\/ps_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-c2\/tf_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-cs_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-cs_x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-cs\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-d\/exper\/si_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-k_x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-ks_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-ks_r1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-p\/dvi_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-ts_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110s1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110s2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110t_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110t-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-a\/m.2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-e\/m.2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-f_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-k_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:trooper_h110_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-r_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h110m2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h110m2\/fpt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h110m-p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-k_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h110m-a_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170i-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170_pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170-pro\/usb_3.1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170m-plus\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170-plus_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:h170m-e_d3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b250-v7_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b250_mining_expert_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-d_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-j_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-k_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_b250i_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_b250g_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_b250h_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_b250f_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b250m-c_pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b250m-f_plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b250-mr_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:b250-s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b250m-v_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b250m-v3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:ex-b250m-v5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:pio-b250i_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_b250m-plus\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h270-pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h270-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_h270i_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_h270f_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_h270m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_ix_extreme_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_ix_formula_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_ix_code_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_ix_apex_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_ix_hero_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270-ar_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270e_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270f_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270g_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270h_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:tuf_z270_mark_1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:tuf_z270_mark_2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270h_gaming\/k1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270-k_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270-p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z270i_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270m-plus_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z270m-plus\/br_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170m-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170m-cm-b_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170s1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170t_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170t_v2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170m2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q170m2\/cdm\/si_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_q270m-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q270m-cm-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:q270-s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_j3355i-c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_x_hero_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_x_formula_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_x_code_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_maximus_x_apex_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z370-a_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:prime_z370-p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:tuf_z370-pro_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:tuf_z370-plus_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z370-g_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z370-e_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z370-f_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z370-h_gaming_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:asus:rog_strix_z370-i_gaming_firmware:-:*:*:*:*:*:*:*