CVE-2017-5712
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - secure@intel.com
- Published
- 2017-11-21
- Last modified
- 2024-09-16
- Weaknesses
- CWE-119
Affected products
- B150-a Firmware (Asus)
- B150-plus Firmware (Asus)
- B150-pro D3 Firmware (Asus)
- B150-pro Firmware (Asus)
- B150 Pro Gaming/aura Firmware (Asus)
- B150 Pro Gaming D3 Firmware (Asus)
- B150 Pro Gaming Firmware (Asus)
- B150i Pro Gaming/aura Firmware (Asus)
- B150i Pro Gaming/wifi/aura Firmware (Asus)
- B150m-a/m.2 Firmware (Asus)
- B150m-a D3 Firmware (Asus)
- B150m-a Firmware (Asus)
- B150m-c/br Firmware (Asus)
- B150m-c D3 Firmware (Asus)
- B150m-c Firmware (Asus)
- B150m-d Firmware (Asus)
- B150m-f Plus Firmware (Asus)
- B150m-k D3 Firmware (Asus)
- B150m-k Firmware (Asus)
- B150m-plus D3 Firmware (Asus)
- B150m-plus Firmware (Asus)
- B150m-v Plus Firmware (Asus)
- B150m Pro Gaming Firmware (Asus)
- B250-mr Firmware (Asus)
- B250-s Firmware (Asus)
- B250 Mining Expert Firmware (Asus)
- B250m-c Pro Firmware (Asus)
- B250m-f Plus Firmware (Asus)
- Ex-b150-v7 Firmware (Asus)
- Ex-b150m-v3 Firmware (Asus)
- Ex-b150m-v5 Firmware (Asus)
- Ex-b150m-v Firmware (Asus)
- Ex-b250-v7 Firmware (Asus)
- Ex-b250m-v3 Firmware (Asus)
- Ex-b250m-v5 Firmware (Asus)
- Ex-b250m-v Firmware (Asus)
- Ex-h110m-v3 Firmware (Asus)
- Ex-h110m-v Firmware (Asus)
- H110-plus Firmware (Asus)
- H110i-plus Firmware (Asus)
- H110m-a/dp Firmware (Asus)
- H110m-a/m.2 Firmware (Asus)
- H110m-a D3 Firmware (Asus)
- H110m-a Firmware (Asus)
- H110m-c2/tf Firmware (Asus)
- H110m-c2 Firmware (Asus)
- H110m-c/br Firmware (Asus)
- H110m-c/hdmi Firmware (Asus)
- H110m-c/ps Firmware (Asus)
- H110m-c Firmware (Asus)
- H110m-cs/br Firmware (Asus)
- H110m-cs Firmware (Asus)
- H110m-cs X Firmware (Asus)
- H110m-d/exper/si Firmware (Asus)
- H110m-d Firmware (Asus)
- H110m-e/m.2 Firmware (Asus)
- H110m-e Firmware (Asus)
- H110m-f Firmware (Asus)
- H110m-k D3 Firmware (Asus)
- H110m-k Firmware (Asus)
- H110m-k X Firmware (Asus)
- H110m-ks Firmware (Asus)
- H110m-ks R1 Firmware (Asus)
- H110m-p/dvi Firmware (Asus)
- H110m-plus Firmware (Asus)
- H110m-r Firmware (Asus)
- H110m-ts Firmware (Asus)
- H110s1 Firmware (Asus)
- H110s2 Firmware (Asus)
- H110t-a Firmware (Asus)
- H110t Firmware (Asus)
- H170-plus D3 Firmware (Asus)
- H170-pro/usb 3.1 Firmware (Asus)
- H170-pro Firmware (Asus)
- H170 Pro Gaming Firmware (Asus)
- H170i-pro Firmware (Asus)
- H170m-e D3 Firmware (Asus)
- H170m-plus/br Firmware (Asus)
- H170m-plus Firmware (Asus)
- Pio-b150m Firmware (Asus)
- Pio-b250i Firmware (Asus)
- Prime B250-a Firmware (Asus)
- Prime B250-plus Firmware (Asus)
- Prime B250-pro Firmware (Asus)
- Prime B250m-a Firmware (Asus)
- Prime B250m-c Firmware (Asus)
- Prime B250m-d Firmware (Asus)
- Prime B250m-j Firmware (Asus)
- Prime B250m-k Firmware (Asus)
- Prime B250m-plus/br Firmware (Asus)
- Prime B250m-plus Firmware (Asus)
- Prime H110m-p Firmware (Asus)
- Prime H110m2/fpt Firmware (Asus)
- Prime H110m2 Firmware (Asus)
- Prime H270-plus Firmware (Asus)
- Prime H270-pro Firmware (Asus)
- Prime H270m-plus Firmware (Asus)
- Prime J3355i-c Firmware (Asus)
- Prime Q270m-c Firmware (Asus)
- Prime Z270-a Firmware (Asus)
References
- http://www.securityfocus.com/bid/101920
- http://www.securitytracker.com/id/1039852
- https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
- https://security.netapp.com/advisory/ntap-20171120-0001/
- https://www.asus.com/News/wzeltG5CjYaIwGJ0