PT-2017-3132 · Intel · Intel Management Engine+3

CVE-2017-5711

·

Publicado

2017-11-20

·

Atualizado

2023-05-22

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel Manageability Engine Firmware versions 8.x through 11.20
Description The issue is related to multiple buffer overflows in Active Management Technology (AMT) that can be exploited by an attacker with local access to the system, allowing them to execute arbitrary code with AMT execution privilege. The vulnerability is also associated with the Intel Management Engine (ME) firmware of the Platform Controller Hub (PCH) family of chipsets, which acts as a southbridge.
Recommendations For Intel Manageability Engine Firmware versions 8.x through 11.20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2017-02532
CVE-2017-5711

Produtos afetados

Active Management Technology
Intel Manageability Engine Firmware
Intel Management Engine
Platform Controller Hub