CVEvulnerability

CVE-2017-5711

7.8 HIGH Published 2017-11-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.

Affected configurations

• intel manageability engine firmware (>= 8.0.0.0 <= 8.1.71.3608) • intel manageability engine firmware (>= 9.0.0.0 <= 9.1.41.3024) • intel manageability engine firmware (>= 10.0.0.0 <= 10.0.55.3000) • intel manageability engine firmware 11.0 • intel manageability engine firmware 11.5 • intel manageability engine firmware 11.6 • intel manageability engine firmware 11.7 • intel manageability engine firmware 11.10 • intel manageability engine firmware 11.20 • intel active management technology firmware • asus z170-premium firmware • asus z170-deluxe firmware • asus z170-pro firmware • asus z170-a firmware • asus z170-ar firmware • asus z170-e firmware • asus z170-k firmware • asus z170-p firmware • asus z170m-plus firmware • asus z170m-plus\/br firmware • asus z170-p d3 firmware • asus z170m-e d3 firmware • asus sabertooth z170 mark 1 firmware • asus sabertooth z170 s firmware • asus rog maximus viii extreme firmware • asus rog maximus viii ranger firmware • asus rog maximus viii formula firmware • asus rog maximus viii hero firmware • asus rog maximus viii hero alpha firmware • asus rog maximus viii gene firmware • asus rog maximus viii impact firmware • asus z170i pro gaming firmware • asus z170 pro gaming firmware • asus z170 pro gaming\/aura firmware • asus b150 pro gaming firmware • asus b150 pro gaming\/aura firmware • asus b150i pro gaming\/wifi\/aura firmware • asus b150i pro gaming\/aura firmware • asus b150m pro gaming firmware • asus b150m-a firmware • asus b150m-a d3 firmware • asus b150m-c d3 firmware • asus b150-a firmware • asus b150m-d firmware • asus b150m-k firmware • asus b150m-plus firmware • asus b150m-f plus firmware • asus b150-plus firmware • asus b150m-v plus firmware • asus ex-b150m-v firmware • asus ex-b150m-v3 firmware • asus ex-b150m-v5 firmware • asus ex-b150-v7 firmware • asus b150-pro firmware • asus b150m-a\/m.2 firmware • asus b150m-c firmware • asus b150m-c\/br firmware • asus pio-b150m firmware • asus trooper b150 d3 firmware • asus b150m-plus d3 firmware … and 146 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References