Critical severity · published Jul 26, 2017
CVE-2017-5691
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6…
9.0
CVSS
1.4%
EPSS
No
On KEV
Description
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LB
Lr1304spcfg1 Bios · Intel
All versions, or not specified · source: NVD
LB
Lr1304spcfg1r Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc6i3syk Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc6i5syk Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc6i7kyk Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc7i3bnk Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc7i5bnk Bios · Intel
All versions, or not specified · source: NVD
NB
Nuc7i7bnh Bios · Intel
All versions, or not specified · source: NVD
RB
R1208sposhor Bios · Intel
All versions, or not specified · source: NVD
RB
R1208sposhorr Bios · Intel
All versions, or not specified · source: NVD
RB
R1304sposhbn Bios · Intel
All versions, or not specified · source: NVD
RB
R1304sposhbnr Bios · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-5691
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-5691
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us
Vendor Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr
support.lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-15184