CVE-2017-5705

Published: Nov 21, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.

Affected (6)

Products: Intel: Manageability Engine Firmware

1 product

Manageability Engine Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Manageability Engine Firmware	Version 11.0
Intel Manageability Engine Firmware	Version 11.10
Intel Manageability Engine Firmware	Version 11.20
Intel Manageability Engine Firmware	Version 11.5
Intel Manageability Engine Firmware	Version 11.6
Intel Manageability Engine Firmware	Version 11.7

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://www.securityfocus.com/bid/101917

Source: secure@intel.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039852

Source: secure@intel.com

Issue TrackingThird Party AdvisoryVDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf

Source: secure@intel.com

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

Source: secure@intel.com

Issue TrackingVendor Advisory

https://security.netapp.com/advisory/ntap-20171120-0001/

Source: secure@intel.com

Issue TrackingThird Party Advisory

https://twitter.com/PTsecurity_UK/status/938447926128291842

Source: secure@intel.com

https://www.asus.com/News/wzeltG5CjYaIwGJ0

Source: secure@intel.com

https://www.synology.com/support/security/Synology_SA_17_73

Source: secure@intel.com

http://www.securityfocus.com/bid/101917

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039852

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://security.netapp.com/advisory/ntap-20171120-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://twitter.com/PTsecurity_UK/status/938447926128291842

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.asus.com/News/wzeltG5CjYaIwGJ0

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.synology.com/support/security/Synology_SA_17_73

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.