IM
IronMonkey Threat Research

CVE-2017-5708 HIGH

Published: 2017-11-21 | Last Modified: 2026-06-17 | Status: Modified

Description

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector.

Additional Descriptions (1)

Múltiples escalados de privilegios en el kernel en Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 permiten que un proceso no autorizado acceda a contenidos privilegiados mediante un vector no especificado.

CVSS Metrics

Base Score: 7.2 (HIGH)

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access VectorLOCAL
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactCOMPLETE
Integrity ImpactCOMPLETE
Availability ImpactCOMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 10.0

Weaknesses

Source Type Description
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
intel manageability_engine_firmware 11.0 <built-in method update of dict object at 0x7e611239e180> Operating System
intel manageability_engine_firmware 11.5 <built-in method update of dict object at 0x7e60ba25f200> Operating System
intel manageability_engine_firmware 11.6 <built-in method update of dict object at 0x7e60a8b7d580> Operating System
intel manageability_engine_firmware 11.7 <built-in method update of dict object at 0x7e6108407880> Operating System
intel manageability_engine_firmware 11.10 <built-in method update of dict object at 0x7e611239fe80> Operating System
intel manageability_engine_firmware 11.20 <built-in method update of dict object at 0x7e611239d180> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:*
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:*
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:*
Yes cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:*

References

Notification
Message here