CVE Feed

    Dashboard / CVE / CVE-2017-5709

    CVE-2017-5709

    Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector.

    Published:Nov 21, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 21, 2017
    EPSS Score:0.00096
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Server Platform Services Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-29515 (CVSS 6) — Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.0…
    CVE-2022-29466 (CVSS 7.3) — Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authe…
    CVE-2022-26074 (CVSS 4.4) — Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_0…
    CVE-2019-11109 (CVSS 4.4) — Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 …
    CVE-2019-11090 (CVSS 5.9) — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70,…
    CVE-2018-12147 (CVSS 6.7) — Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platfo…
    CVE-2019-0099 (CVSS 6.8) — Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 ma…
    CVE-2018-12192 (CVSS 6.8) — Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R)…
    CVE-2018-12191 (CVSS 7.6) — Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel…
    CVE-2018-12208 (CVSS 7.6) — Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and …

    References

    http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
    http://www.securityfocus.com/bid/101906
    http://www.securitytracker.com/id/1039955
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
    https://www.asus.com/News/wzeltG5CjYaIwGJ0
    http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
    http://www.securityfocus.com/bid/101906
    http://www.securitytracker.com/id/1039955
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
    https://www.asus.com/News/wzeltG5CjYaIwGJ0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High