CVEvulnerability
CVE-2017-5691
9.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-07-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
Affected configurations
• intel nuc7i3bnk bios
• intel nuc7i5bnk bios
• intel nuc7i7bnh bios
• intel stk2mv64cc bios
• intel stk2m3w64cc bios
• intel nuc6i7kyk bios
• intel nuc6i3syk bios
• intel nuc6i5syk bios
• intel r1304sposhor bios
• intel r1304sposhorr bios
• intel r1208sposhorr bios
• intel lr1304spcfg1r bios
• intel r1208sposhor bios
• intel s1200spsr bios
• intel s1200spor bios
• intel lr1304spcfg1 bios
• intel s1200spl bios
• intel s1200spo bios
• intel s1200sps bios
• intel r1304sposhbn bios
• intel s1200splr bios
• intel r1304sposhbnr bios
References
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us Third Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-15184 support.lenovo.com
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us Third Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-15184 support.lenovo.com