Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-5711


Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.8, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 394 products from intel, from intel, from asus and 391 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2017, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2017-11-21T14:29:00.510

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel manageability_engine_firmware ≤ 8.1.71.3608 Yes
Operating System intel manageability_engine_firmware ≤ 9.1.41.3024 Yes
Operating System intel manageability_engine_firmware ≤ 10.0.55.3000 Yes
Operating System intel manageability_engine_firmware 11.0 Yes
Operating System intel manageability_engine_firmware 11.5 Yes
Operating System intel manageability_engine_firmware 11.6 Yes
Operating System intel manageability_engine_firmware 11.7 Yes
Operating System intel manageability_engine_firmware 11.10 Yes
Operating System intel manageability_engine_firmware 11.20 Yes
Operating System intel active_management_technology_firmware - Yes
Operating System asus z170-premium_firmware - Yes
Hardware asus z170-premium - No
Operating System asus z170-deluxe_firmware - Yes
Hardware asus z170-deluxe - No
Operating System asus z170-pro_firmware - Yes
Hardware asus z170-pro - No
Operating System asus z170-a_firmware - Yes
Hardware asus z170-a - No
Operating System asus z170-ar_firmware - Yes
Hardware asus z170-ar - No
Operating System asus z170-e_firmware - Yes
Hardware asus z170-e - No
Operating System asus z170-k_firmware - Yes
Hardware asus z170-k - No
Operating System asus z170-p_firmware - Yes
Hardware asus z170-p - No
Operating System asus z170m-plus_firmware - Yes
Hardware asus z170m-plus - No
Operating System asus z170m-plus\/br_firmware - Yes
Hardware asus z170m-plus\/br - No
Operating System asus z170-p_d3_firmware - Yes
Hardware asus z170-p_d3 - No
Operating System asus z170m-e_d3_firmware - Yes
Hardware asus z170m-e_d3 - No
Operating System asus sabertooth_z170_mark_1_firmware - Yes
Hardware asus sabertooth_z170_mark_1 - No
Operating System asus sabertooth_z170_s_firmware - Yes
Hardware asus sabertooth_z170_s - No
Operating System asus rog_maximus_viii_extreme_firmware - Yes
Hardware asus rog_maximus_viii_extreme - No
Operating System asus rog_maximus_viii_ranger_firmware - Yes
Hardware asus rog_maximus_viii_ranger - No
Operating System asus rog_maximus_viii_formula_firmware - Yes
Hardware asus rog_maximus_viii_formula - No
Operating System asus rog_maximus_viii_hero_firmware - Yes
Hardware asus rog_maximus_viii_hero - No
Operating System asus rog_maximus_viii_hero_alpha_firmware - Yes
Hardware asus rog_maximus_viii_hero_alpha - No
Operating System asus rog_maximus_viii_gene_firmware - Yes
Hardware asus rog_maximus_viii_gene - No
Operating System asus rog_maximus_viii_impact_firmware - Yes
Hardware asus rog_maximus_viii_impact - No
Operating System asus z170i_pro_gaming_firmware - Yes
Hardware asus z170i_pro_gaming - No
Operating System asus z170_pro_gaming_firmware - Yes
Hardware asus z170_pro_gaming - No
Operating System asus z170_pro_gaming\/aura_firmware - Yes
Hardware asus z170_pro_gaming\/aura - No
Operating System asus b150_pro_gaming_firmware - Yes
Hardware asus b150_pro_gaming - No
Operating System asus b150_pro_gaming\/aura_firmware - Yes
Hardware asus b150_pro_gaming\/aura - No
Operating System asus b150i_pro_gaming\/wifi\/aura_firmware - Yes
Hardware asus b150i_pro_gaming\/wifi\/aura - No
Operating System asus b150i_pro_gaming\/aura_firmware - Yes
Hardware asus b150i_pro_gaming\/aura - No
Operating System asus b150m_pro_gaming_firmware - Yes
Hardware asus b150m_pro_gaming - No
Operating System asus b150m-a_firmware - Yes
Hardware asus b150m-a - No
Operating System asus b150m-a_d3_firmware - Yes
Hardware asus b150m-a_d3 - No
Operating System asus b150m-c_d3_firmware - Yes
Hardware asus b150m-c_d3 - No
Operating System asus b150-a_firmware - Yes
Hardware asus b150-a - No
Operating System asus b150m-d_firmware - Yes
Hardware asus b150m-d - No
Operating System asus b150m-k_firmware - Yes
Hardware asus b150m-k - No
Operating System asus b150m-plus_firmware - Yes
Hardware asus b150m-plus - No
Operating System asus b150m-f_plus_firmware - Yes
Hardware asus b150m-f_plus - No
Operating System asus b150-plus_firmware - Yes
Hardware asus b150-plus - No
Operating System asus b150m-v_plus_firmware - Yes
Hardware asus b150m-v_plus - No
Operating System asus ex-b150m-v_firmware - Yes
Hardware asus ex-b150m-v - No
Operating System asus ex-b150m-v3_firmware - Yes
Hardware asus ex-b150m-v3 - No
Operating System asus ex-b150m-v5_firmware - Yes
Hardware asus ex-b150m-v5 - No
Operating System asus ex-b150-v7_firmware - Yes
Hardware asus ex-b150-v7 - No
Operating System asus b150-pro_firmware - Yes
Hardware asus b150-pro - No
Operating System asus b150m-a\/m.2_firmware - Yes
Hardware asus b150m-a\/m.2 - No
Operating System asus b150m-c_firmware - Yes
Hardware asus b150m-c - No
Operating System asus b150m-c\/br_firmware - Yes
Hardware asus b150m-c\/br - No
Operating System asus pio-b150m_firmware - Yes
Hardware asus pio-b150m - No
Operating System asus trooper_b150_d3_firmware - Yes
Hardware asus trooper_b150_d3 - No
Operating System asus b150m-plus_d3_firmware - Yes
Hardware asus b150m-plus_d3 - No
Operating System asus b150_pro_gaming_d3_firmware - Yes
Hardware asus b150_pro_gaming_d3 - No
Operating System asus b150m-k_d3_firmware - Yes
Hardware asus b150m-k_d3 - No
Operating System asus b150-pro_d3_firmware - Yes
Hardware asus b150-pro_d3 - No
Operating System asus ex-h110m-v_firmware - Yes
Hardware asus ex-h110m-v - No
Operating System asus ex-h110m-v3_firmware - Yes
Hardware asus ex-h110m-v3 - No
Operating System asus h110i-plus_firmware - Yes
Hardware asus h110i-plus - No
Operating System asus h110m-a\/dp_firmware - Yes
Hardware asus h110m-a\/dp - No
Operating System asus h110m-c_firmware - Yes
Hardware asus h110m-c - No
Operating System asus h110m-c\/br_firmware - Yes
Hardware asus h110m-c\/br - No
Operating System asus h110m-c\/hdmi_firmware - Yes
Hardware asus h110m-c\/hdmi - No
Operating System asus h110m-c\/ps_firmware - Yes
Hardware asus h110m-c\/ps - No
Operating System asus h110m-c2_firmware - Yes
Hardware asus h110m-c2 - No
Operating System asus h110m-c2\/tf_firmware - Yes
Hardware asus h110m-c2\/tf - No
Operating System asus h110m-cs_firmware - Yes
Hardware asus h110m-cs - No
Operating System asus h110m-cs_x_firmware - Yes
Hardware asus h110m-cs_x - No
Operating System asus h110m-cs\/br_firmware - Yes
Hardware asus h110m-cs\/br - No
Operating System asus h110m-d\/exper\/si_firmware - Yes
Hardware asus h110m-d\/exper\/si - No
Operating System asus h110m-k_x_firmware - Yes
Hardware asus h110m-k_x - No
Operating System asus h110m-ks_firmware - Yes
Hardware asus h110m-ks - No
Operating System asus h110m-ks_r1_firmware - Yes
Hardware asus h110m-ks_r1 - No
Operating System asus h110m-p\/dvi_firmware - Yes
Hardware asus h110m-p\/dvi - No
Operating System asus h110m-ts_firmware - Yes
Hardware asus h110m-ts - No
Operating System asus h110-plus_firmware - Yes
Hardware asus h110-plus - No
Operating System asus h110s1_firmware - Yes
Hardware asus h110s1 - No
Operating System asus h110s2_firmware - Yes
Hardware asus h110s2 - No
Operating System asus h110t_firmware - Yes
Hardware asus h110t - No
Operating System asus h110t-a_firmware - Yes
Hardware asus h110t-a - No
Operating System asus h110m-a\/m.2_firmware - Yes
Hardware asus h110m-a\/m.2 - No
Operating System asus h110m-d_firmware - Yes
Hardware asus h110m-d - No
Operating System asus h110m-e_firmware - Yes
Hardware asus h110m-e - No
Operating System asus h110m-e\/m.2_firmware - Yes
Hardware asus h110m-e\/m.2 - No
Operating System asus h110m-f_firmware - Yes
Hardware asus h110m-f - No
Operating System asus h110m-k_firmware - Yes
Hardware asus h110m-k - No
Operating System asus h110m-a_firmware - Yes
Hardware asus h110m-a - No
Operating System asus trooper_h110_d3_firmware - Yes
Hardware asus trooper_h110_d3 - No
Operating System asus h110m-plus_firmware - Yes
Hardware asus h110m-plus - No
Operating System asus h110m-r_firmware - Yes
Hardware asus h110m-r - No
Operating System asus prime_h110m2_firmware - Yes
Hardware asus prime_h110m2 - No
Operating System asus prime_h110m2\/fpt_firmware - Yes
Hardware asus prime_h110m2\/fpt - No
Operating System asus prime_h110m-p_firmware - Yes
Hardware asus prime_h110m-p - No
Operating System asus h110m-k_d3_firmware - Yes
Hardware asus h110m-k_d3 - No
Operating System asus h110m-a_d3_firmware - Yes
Hardware asus h110m-a_d3 - No
Operating System asus h170-pro_firmware - Yes
Hardware asus h170-pro - No
Operating System asus h170i-pro_firmware - Yes
Hardware asus h170i-pro - No
Operating System asus h170_pro_gaming_firmware - Yes
Hardware asus h170_pro_gaming - No
Operating System asus h170m-plus_firmware - Yes
Hardware asus h170m-plus - No
Operating System asus h170-pro\/usb_3.1_firmware - Yes
Hardware asus h170-pro\/usb_3.1 - No
Operating System asus h170m-plus\/br_firmware - Yes
Hardware asus h170m-plus\/br - No
Operating System asus h170-plus_d3_firmware - Yes
Hardware asus h170-plus_d3 - No
Operating System asus h170m-e_d3_firmware - Yes
Hardware asus h170m-e_d3 - No
Operating System asus ex-b250-v7_firmware - Yes
Hardware asus ex-b250-v7 - No
Operating System asus b250_mining_expert_firmware - Yes
Hardware asus b250_mining_expert - No
Operating System asus prime_b250m-d_firmware - Yes
Hardware asus prime_b250m-d - No
Operating System asus prime_b250-a_firmware - Yes
Hardware asus prime_b250-a - No
Operating System asus prime_b250m-a_firmware - Yes
Hardware asus prime_b250m-a - No
Operating System asus prime_b250m-j_firmware - Yes
Hardware asus prime_b250m-j - No
Operating System asus prime_b250m-plus_firmware - Yes
Hardware asus prime_b250m-plus - No
Operating System asus prime_b250-plus_firmware - Yes
Hardware asus prime_b250-plus - No
Operating System asus prime_b250m-k_firmware - Yes
Hardware asus prime_b250m-k - No
Operating System asus prime_b250-pro_firmware - Yes
Hardware asus prime_b250-pro - No
Operating System asus rog_strix_b250i_gaming_firmware - Yes
Hardware asus rog_strix_b250i_gaming - No
Operating System asus rog_strix_b250g_gaming_firmware - Yes
Hardware asus rog_strix_b250g_gaming - No
Operating System asus rog_strix_b250h_gaming_firmware - Yes
Hardware asus rog_strix_b250h_gaming - No
Operating System asus rog_strix_b250f_gaming_firmware - Yes
Hardware asus rog_strix_b250f_gaming - No
Operating System asus b250m-c_pro_firmware - Yes
Hardware asus b250m-c_pro - No
Operating System asus b250m-f_plus_firmware - Yes
Hardware asus b250m-f_plus - No
Operating System asus b250-mr_firmware - Yes
Hardware asus b250-mr - No
Operating System asus b250-s_firmware - Yes
Hardware asus b250-s - No
Operating System asus ex-b250m-v_firmware - Yes
Hardware asus ex-b250m-v - No
Operating System asus ex-b250m-v3_firmware - Yes
Hardware asus ex-b250m-v3 - No
Operating System asus ex-b250m-v5_firmware - Yes
Hardware asus ex-b250m-v5 - No
Operating System asus pio-b250i_firmware - Yes
Hardware asus pio-b250i - No
Operating System asus prime_b250m-c_firmware - Yes
Hardware asus prime_b250m-c - No
Operating System asus prime_b250m-plus\/br_firmware - Yes
Hardware asus prime_b250m-plus\/br - No
Operating System asus prime_h270-pro_firmware - Yes
Hardware asus prime_h270-pro - No
Operating System asus prime_h270-plus_firmware - Yes
Hardware asus prime_h270-plus - No
Operating System asus rog_strix_h270i_gaming_firmware - Yes
Hardware asus rog_strix_h270i_gaming - No
Operating System asus rog_strix_h270f_gaming_firmware - Yes
Hardware asus rog_strix_h270f_gaming - No
Operating System asus prime_h270m-plus_firmware - Yes
Hardware asus prime_h270m-plus - No
Operating System asus rog_maximus_ix_extreme_firmware - Yes
Hardware asus rog_maximus_ix_extreme - No
Operating System asus rog_maximus_ix_formula_firmware - Yes
Hardware asus rog_maximus_ix_formula - No
Operating System asus rog_maximus_ix_code_firmware - Yes
Hardware asus rog_maximus_ix_code - No
Operating System asus rog_maximus_ix_apex_firmware - Yes
Hardware asus rog_maximus_ix_apex - No
Operating System asus rog_maximus_ix_hero_firmware - Yes
Hardware asus rog_maximus_ix_hero - No
Operating System asus prime_z270-a_firmware - Yes
Hardware asus prime_z270-a - No
Operating System asus prime_z270-ar_firmware - Yes
Hardware asus prime_z270-ar - No
Operating System asus rog_strix_z270e_gaming_firmware - Yes
Hardware asus rog_strix_z270e_gaming - No
Operating System asus rog_strix_z270f_gaming_firmware - Yes
Hardware asus rog_strix_z270f_gaming - No
Operating System asus rog_strix_z270g_gaming_firmware - Yes
Hardware asus rog_strix_z270g_gaming - No
Operating System asus rog_strix_z270h_gaming_firmware - Yes
Hardware asus rog_strix_z270h_gaming - No
Operating System asus tuf_z270_mark_1_firmware - Yes
Hardware asus tuf_z270_mark_1 - No
Operating System asus tuf_z270_mark_2_firmware - Yes
Hardware asus tuf_z270_mark_2 - No
Operating System asus rog_strix_z270h_gaming\/k1_firmware - Yes
Hardware asus rog_strix_z270h_gaming\/k1 - No
Operating System asus prime_z270-k_firmware - Yes
Hardware asus prime_z270-k - No
Operating System asus prime_z270-p_firmware - Yes
Hardware asus prime_z270-p - No
Operating System asus rog_strix_z270i_gaming_firmware - Yes
Hardware asus rog_strix_z270i_gaming - No
Operating System asus prime_z270m-plus_firmware - Yes
Hardware asus prime_z270m-plus - No
Operating System asus prime_z270m-plus\/br_firmware - Yes
Hardware asus prime_z270m-plus\/br - No
Operating System asus q170m-c_firmware - Yes
Hardware asus q170m-c - No
Operating System asus q170m-cm-b_firmware - Yes
Hardware asus q170m-cm-b - No
Operating System asus q170s1_firmware - Yes
Hardware asus q170s1 - No
Operating System asus q170t_firmware - Yes
Hardware asus q170t - No
Operating System asus q170t_v2_firmware - Yes
Hardware asus q170t_v2 - No
Operating System asus q170m2_firmware - Yes
Hardware asus q170m2 - No
Operating System asus q170m2\/cdm\/si_firmware - Yes
Hardware asus q170m2\/cdm\/si - No
Operating System asus prime_q270m-c_firmware - Yes
Hardware asus prime_q270m-c - No
Operating System asus q270m-cm-a_firmware - Yes
Hardware asus q270m-cm-a - No
Operating System asus q270-s_firmware - Yes
Hardware asus q270-s - No
Operating System asus prime_j3355i-c_firmware - Yes
Hardware asus prime_j3355i-c - No
Operating System asus rog_maximus_x_hero_firmware - Yes
Hardware asus rog_maximus_x_hero - No
Operating System asus rog_maximus_x_formula_firmware - Yes
Hardware asus rog_maximus_x_formula - No
Operating System asus rog_maximus_x_code_firmware - Yes
Hardware asus rog_maximus_x_code - No
Operating System asus rog_maximus_x_apex_firmware - Yes
Hardware asus rog_maximus_x_apex - No
Operating System asus prime_z370-a_firmware - Yes
Hardware asus prime_z370-a - No
Operating System asus prime_z370-p_firmware - Yes
Hardware asus prime_z370-p - No
Operating System asus tuf_z370-pro_gaming_firmware - Yes
Hardware asus tuf_z370-pro_gaming - No
Operating System asus tuf_z370-plus_gaming_firmware - Yes
Hardware asus tuf_z370-plus_gaming - No
Operating System asus rog_strix_z370-g_gaming_firmware - Yes
Hardware asus rog_strix_z370-g_gaming - No
Operating System asus rog_strix_z370-e_gaming_firmware - Yes
Hardware asus rog_strix_z370-e_gaming - No
Operating System asus rog_strix_z370-f_gaming_firmware - Yes
Hardware asus rog_strix_z370-f_gaming - No
Operating System asus rog_strix_z370-h_gaming_firmware - Yes
Hardware asus rog_strix_z370-h_gaming - No
Operating System asus rog_strix_z370-i_gaming_firmware - Yes
Hardware asus rog_strix_z370-i_gaming - No
Operating System siemens simatic_field_pg_m3_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_field_pg_m3 - No
Operating System siemens simatic_field_pg_m4_firmware < 18.01.06 Yes
Hardware siemens simatic_field_pg_m4 - No
Operating System siemens simatic_field_pg_m5_firmware < 22.01.04 Yes
Hardware siemens simatic_field_pg_m5 - No
Operating System siemens simatic_ipc677c_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_ipc677c - No
Operating System siemens simatic_ipc427d_firmware - Yes
Hardware siemens simatic_ipc427d - No
Operating System siemens simatic_ipc427e_firmware < 21.01.07 Yes
Hardware siemens simatic_ipc427e - No
Operating System siemens simatic_ipc477d_firmware - Yes
Hardware siemens simatic_ipc477d - No
Operating System siemens simatic_ipc477d_pro_firmware - Yes
Hardware siemens simatic_ipc477d_pro - No
Operating System siemens simatic_ipc477e_firmware < 21.01.07 Yes
Hardware siemens simatic_ipc477e - No
Operating System siemens simatic_ipc547d_firmware < 7.1.91.3272 Yes
Hardware siemens simatic_ipc547d - No
Operating System siemens simatic_ipc547e_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc547e - No
Operating System siemens simatic_ipc627c_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_ipc627c - No
Operating System siemens simatic_ipc627d_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc627d - No
Operating System siemens simatic_ipc647c_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_ipc647c - No
Operating System siemens simatic_ipc647d_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc647d - No
Operating System siemens simatic_ipc677d_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc677d - No
Operating System siemens simatic_ipc827c_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_ipc827c - No
Operating System siemens simatic_ipc827d_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc827d - No
Operating System siemens simatic_ipc847c_firmware < 6.2.61.3535 Yes
Hardware siemens simatic_ipc847c - No
Operating System siemens simatic_ipc847d_firmware < 9.1.41.3024 Yes
Hardware siemens simatic_ipc847d - No
Operating System siemens simatic_itp1000_firmware < 23.01.03 Yes
Hardware siemens simatic_itp1000 - No
Operating System siemens simotion_p320-4s_firmware < 17.02.06.83.1 Yes
Hardware siemens simotion_p320-4s - No
Operating System siemens sinumerik_pcu50.5-c_firmware < 6.2.61.3535 Yes
Hardware siemens sinumerik_pcu50.5-c - No
Operating System siemens sinumerik_pcu50.5-p_firmware < 6.2.61.3535 Yes
Hardware siemens sinumerik_pcu50.5-p - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.