CVE Feed

    Dashboard / CVE / CVE-2017-5707

    CVE-2017-5707

    Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code.

    Published:Nov 21, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 21, 2017
    EPSS Score:0.00149
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Trusted Execution Engine Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-0539 (CVSS 5.5) — Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.…
    CVE-2020-0536 (CVSS 7.5) — Improper input validation in the DAL subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77, …
    CVE-2020-0566 (CVSS 6.8) — Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenti…
    CVE-2019-11110 (CVSS 6.7) — Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,…
    CVE-2019-11106 (CVSS 6.7) — Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 a…
    CVE-2019-11102 (CVSS 4.4) — Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11…
    CVE-2019-11101 (CVSS 4.4) — Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, …
    CVE-2019-11087 (CVSS 6.7) — Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, …
    CVE-2019-0168 (CVSS 4.4) — Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10;…
    CVE-2019-11090 (CVSS 5.9) — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70,…

    References

    http://www.securityfocus.com/bid/101919
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://twitter.com/PTsecurity_UK/status/938447926128291842
    https://www.asus.com/News/wzeltG5CjYaIwGJ0
    https://www.synology.com/support/security/Synology_SA_17_73
    http://www.securityfocus.com/bid/101919
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://twitter.com/PTsecurity_UK/status/938447926128291842
    https://www.asus.com/News/wzeltG5CjYaIwGJ0
    https://www.synology.com/support/security/Synology_SA_17_73

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High