ID

VAR-201711-0649

CVE

CVE-2017-5710

TITLE

Intel Trusted Execution Engine Firmware Vulnerabilities related to authorization, permissions, and access control

DESCRIPTION

Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecified vector. IntelTrustedExecutionEngineFirmware is a trusted execution engine firmware product. There are multiple local privilege elevation vulnerabilities in IntelTrustedExecutionEngine. An attacker could exploit the vulnerability to access privileged content. Intel Xeon Processor E3-1200 and others are CPUs (Central Processing Units) of Intel Corporation. kernel is one of the kernels. The following products are affected: Intel 6th, 7th, and 8th Generation Intel Core Processor Family; Intel Xeon Processor E3-1200 v5 and v6 Product Family; Intel Xeon Processor Scalable Family; Intel Xeon Processor W Family; Intel Atom C3000 Processor Family; Apollo Lake Intel Atom Processor E3900 series; Apollo Lake Intel Pentium; Celeron N and J series Processors

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

local

TYPE

permissions and access control issues

CONFIGURATIONS

[
  {
    "CVE_data_version": "4.0",
    "nodes": [
      {
        "operator": "OR",
        "cpe_match": [
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/o:intel:trusted_execution_engine_firmware"
          }
        ]
      }
    ]
  }
]

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

The vendor reported this issue.

SOURCES

LAST UPDATE DATE

2024-11-23T21:53:37.763000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE