Details of VAR-201711-0651

ID

VAR-201711-0651

CVE

CVE-2017-5712

TITLE

Intel Manageability Engine Firmware of Active Management Technology Buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-010525

DESCRIPTION

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege. Intel Manageability Engine The Intel Management Engine is Intel's thermal management driver for its desktop family of chipsets. Failed exploits may result in denial-of-service conditions. Intel Manageability Engine versions 8.x, 9.x, 10.x, 11.0,11.5, 11.6, 11.7, 11.10, and 11.20 are vulnerable. Intel Xeon Processor E3-1200 and others are CPUs (Central Processing Units) of Intel Corporation. Active Management Technology (AMT) is one of the active management components. The following products and firmware are affected: Intel Manageability Engine Firmware Version 8.x, Version 9.x, Version 10.x, Version 11.0, Version 11.5, Version 11.6, Version 11.7, Version 11.10, Version 11.20; Intel 6th, 7th and 8th Generation Intel Core Processor Family; Intel Xeon Processor E3-1200 v5 and v6 Product Family; Intel Xeon Processor Scalable Family; Intel Xeon Processor W Family; Intel Atom C3000 Processor Family; Apollo Lake Intel Atom Processor E3900 series; Apollo Lake Intel Pentium; Celeron N and J series Processors

Trust: 2.7

sources: NVD: CVE-2017-5712 // JVNDB: JVNDB-2017-010525 // CNVD: CNVD-2017-37852 // BID: 101920 // IVD: e2e06b61-39ab-11e9-9e0b-000c29342cb1 // VULHUB: VHN-113915

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: e2e06b61-39ab-11e9-9e0b-000c29342cb1 // CNVD: CNVD-2017-37852

AFFECTED PRODUCTS

vendor:	intel	model:	manageability engine	scope:	eq	version:	11.7	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.6	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.5	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.20	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.10	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.0	Trust: 2.5
vendor:	intel	model:	active management technology	scope:	eq	version:	-	Trust: 1.6
vendor:	asus	model:	z170 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150-v7	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v5	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-p d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v5	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix hero	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc847c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	prime h110m-p	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simotion p320-4s	scope:	lt	version:	17.02.06.83.1	Trust: 1.0
vendor:	asus	model:	rog maximus x hero	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h270-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime q270m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-pro\/usb 3.1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k d3	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m3	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h170i-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250m-f plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170t	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs x	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h110m2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250m-c pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-v plus	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	10.0.0.0	Trust: 1.0
vendor:	asus	model:	h110m-ts	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z370-pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-ks r1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150i pro gaming\/wifi\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110t	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x apex	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	trooper h110 d3	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc547e	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	rog maximus viii ranger	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	9.0.0.0	Trust: 1.0
vendor:	asus	model:	b150m-f plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	sabertooth z170 s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc547d	scope:	lt	version:	7.1.91.3272	Trust: 1.0
vendor:	asus	model:	prime z370-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q270m-cm-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-p\/dvi	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	sabertooth z170 mark 1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	8.0.0.0	Trust: 1.0
vendor:	asus	model:	trooper b150 d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	sinumerik pcu50.5-p	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	prime z270-k	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc477e	scope:	lt	version:	21.01.07	Trust: 1.0
vendor:	asus	model:	h170m-e d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii extreme	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-plus d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-f	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-e	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix h270f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc827c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h110m-c2\/tf	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc477d pro	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc847d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b250 mining expert	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170 pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170i pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250-v7	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-d\/exper\/si	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/hdmi	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z370-plus gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	pio-b250i	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-e\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc677d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	ex-h110m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix code	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170t v2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h270m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270h gaming\/k1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc627d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b150m pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-premium	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-a\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-a d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-e gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc647d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b150m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250-mr	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m4	scope:	lt	version:	18.01.06	Trust: 1.0
vendor:	asus	model:	q270-s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h110m2\/fpt	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix formula	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc427d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc827d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	prime h270-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix extreme	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix h270i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/ps	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-ar	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110i-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z370-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250-s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-ks	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic itp1000	scope:	lt	version:	23.01.03	Trust: 1.0
vendor:	asus	model:	q170m-cm-b	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii impact	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-e d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-a	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc677c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	siemens	model:	simatic ipc477d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a\/dp	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z270 mark 1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii hero	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x formula	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m2\/cdm\/si	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110s2	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	8.1.71.3608	Trust: 1.0
vendor:	asus	model:	rog maximus viii hero alpha	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-k d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150i pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-plus d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	pio-b150m	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x code	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-deluxe	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	prime b250m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-pro d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime j3355i-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii formula	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii gene	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc647c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	siemens	model:	simatic ipc427e	scope:	lt	version:	21.01.07	Trust: 1.0
vendor:	asus	model:	prime b250m-j	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270e gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	sinumerik pcu50.5-c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h110m-r	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m5	scope:	lt	version:	22.01.04	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	10.0.55.3000	Trust: 1.0
vendor:	asus	model:	h110s1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-h110m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170s1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-ar	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z270 mark 2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k x	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix apex	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110t-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-e	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc627c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	eq	version:	9.0	Trust: 0.9
vendor:	intel	model:	manageability engine	scope:	eq	version:	8.0	Trust: 0.9
vendor:	intel	model:	manageability engine	scope:	eq	version:	10.0	Trust: 0.9
vendor:	intel	model:	active management technology	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	manageability engine	scope:	-	version:	-	Trust: 0.8
vendor:	manageability engine	model:	-	scope:	eq	version:	*	Trust: 0.6
vendor:	manageability engine	model:	-	scope:	eq	version:	11.0	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.5	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.6	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.7	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.10	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.20	Trust: 0.2
vendor:	active management	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2e06b61-39ab-11e9-9e0b-000c29342cb1 // CNVD: CNVD-2017-37852 // BID: 101920 // JVNDB: JVNDB-2017-010525 // CNNVD: CNNVD-201711-880 // NVD: CVE-2017-5712

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-5712
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-5712
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2017-37852
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201711-880
value:	HIGH
Trust: 0.6
IVD:	e2e06b61-39ab-11e9-9e0b-000c29342cb1
value:	CRITICAL
Trust: 0.2
VULHUB:	VHN-113915
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2017-5712
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-37852
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2e06b61-39ab-11e9-9e0b-000c29342cb1
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-113915
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-5712
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2017-5712
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: e2e06b61-39ab-11e9-9e0b-000c29342cb1 // CNVD: CNVD-2017-37852 // VULHUB: VHN-113915 // JVNDB: JVNDB-2017-010525 // CNNVD: CNNVD-201711-880 // NVD: CVE-2017-5712

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-113915 // JVNDB: JVNDB-2017-010525 // NVD: CVE-2017-5712

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201711-880

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201711-880

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-010525

PATCH

title:	INTEL-SA-00086	url:	https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr	Trust: 0.8
title:	NTAP-20171120-0001	url:	https://security.netapp.com/advisory/ntap-20171120-0001/	Trust: 0.8
title:	Patch for Intel Manageability Engine Buffer Overflow Vulnerability (CNVD-2017-37852)	url:	https://www.cnvd.org.cn/patchInfo/show/111453	Trust: 0.6
title:	Multiple Intel product Intel Manageability Engine Firmware Buffer error vulnerability fix	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=76612	Trust: 0.6

sources: CNVD: CNVD-2017-37852 // JVNDB: JVNDB-2017-010525 // CNNVD: CNNVD-201711-880

EXTERNAL IDS

db:	NVD	id:	CVE-2017-5712	Trust: 3.6
db:	BID	id:	101920	Trust: 2.6
db:	SECTRACK	id:	1039852	Trust: 1.7
db:	SIEMENS	id:	SSA-892715	Trust: 1.7
db:	CNNVD	id:	CNNVD-201711-880	Trust: 0.9
db:	CNVD	id:	CNVD-2017-37852	Trust: 0.8
db:	ICS CERT	id:	ICSA-18-060-01	Trust: 0.8
db:	JVNDB	id:	JVNDB-2017-010525	Trust: 0.8
db:	IVD	id:	E2E06B61-39AB-11E9-9E0B-000C29342CB1	Trust: 0.2
db:	VULHUB	id:	VHN-113915	Trust: 0.1

sources: IVD: e2e06b61-39ab-11e9-9e0b-000c29342cb1 // CNVD: CNVD-2017-37852 // VULHUB: VHN-113915 // BID: 101920 // JVNDB: JVNDB-2017-010525 // CNNVD: CNNVD-201711-880 // NVD: CVE-2017-5712

REFERENCES

url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00086&languageid=en-fr	Trust: 2.5
url:	http://www.securityfocus.com/bid/101920	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf	Trust: 1.7
url:	https://security.netapp.com/advisory/ntap-20171120-0001/	Trust: 1.7
url:	https://www.asus.com/news/wzeltg5cjyaiwgj0	Trust: 1.7
url:	http://www.securitytracker.com/id/1039852	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5712	Trust: 0.8
url:	https://www.us-cert.gov/ics/advisories/icsa-18-060-01	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-5712	Trust: 0.8
url:	http://www.intel.com/content/www/us/en/homepage.html	Trust: 0.3
url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00086&languageid=en-fr	Trust: 0.1

sources: CNVD: CNVD-2017-37852 // VULHUB: VHN-113915 // BID: 101920 // JVNDB: JVNDB-2017-010525 // CNNVD: CNNVD-201711-880 // NVD: CVE-2017-5712

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 101920

SOURCES

db:	IVD	id:	e2e06b61-39ab-11e9-9e0b-000c29342cb1
db:	CNVD	id:	CNVD-2017-37852
db:	VULHUB	id:	VHN-113915
db:	BID	id:	101920
db:	JVNDB	id:	JVNDB-2017-010525
db:	CNNVD	id:	CNNVD-201711-880
db:	NVD	id:	CVE-2017-5712

LAST UPDATE DATE

2024-08-14T13:29:32.541000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-37852	date:	2017-12-22T00:00:00
db:	VULHUB	id:	VHN-113915	date:	2018-05-11T00:00:00
db:	BID	id:	101920	date:	2017-12-19T22:00:00
db:	JVNDB	id:	JVNDB-2017-010525	date:	2019-07-10T00:00:00
db:	CNNVD	id:	CNNVD-201711-880	date:	2023-05-23T00:00:00
db:	NVD	id:	CVE-2017-5712	date:	2023-05-22T16:18:54.070

SOURCES RELEASE DATE

db:	IVD	id:	e2e06b61-39ab-11e9-9e0b-000c29342cb1	date:	2017-12-22T00:00:00
db:	CNVD	id:	CNVD-2017-37852	date:	2017-12-22T00:00:00
db:	VULHUB	id:	VHN-113915	date:	2017-11-21T00:00:00
db:	BID	id:	101920	date:	2017-11-20T00:00:00
db:	JVNDB	id:	JVNDB-2017-010525	date:	2017-12-18T00:00:00
db:	CNNVD	id:	CNNVD-201711-880	date:	2017-11-24T00:00:00
db:	NVD	id:	CVE-2017-5712	date:	2017-11-21T14:29:00.540