PT-2017-3132 · Intel · Intel Management Engine+3
CVE-2017-5711
·
Publicado
2017-11-20
·
Atualizado
2023-05-22
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Intel Manageability Engine Firmware versions 8.x through 11.20
Description
The issue is related to multiple buffer overflows in Active Management Technology (AMT) that can be exploited by an attacker with local access to the system, allowing them to execute arbitrary code with AMT execution privilege. The vulnerability is also associated with the Intel Management Engine (ME) firmware of the Platform Controller Hub (PCH) family of chipsets, which acts as a southbridge.
Recommendations
For Intel Manageability Engine Firmware versions 8.x through 11.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Active Management Technology
Intel Manageability Engine Firmware
Intel Management Engine
Platform Controller Hub