Skip to main content

Simatic Itp1000 Firmware CVE-2017-5711

HIGH
Buffer Overflow (CWE-119)
2017-11-21 secure@intel.com
RCE Buffer Overflow Siemens Intel Simatic Itp1000 Firmware Simatic Ipc847D Firmware Simatic Ipc847C Firmware Simatic Ipc827D Firmware Simatic Ipc827C Firmware Simatic Ipc677D Firmware Simatic Ipc677C Firmware Simatic Ipc647D Firmware Simatic Ipc647C Firmware Simatic Ipc627D Firmware Simatic Ipc627C Firmware Simatic Ipc547E Firmware Simatic Ipc547D Firmware Simatic Ipc477E Firmware Simatic Ipc477D Firmware Simatic Field Pg M3 Firmware Simatic Field Pg M4 Firmware Simatic Field Pg M5 Firmware Simatic Ipc427D Firmware Simatic Ipc427E Firmware Sinumerik Pcu50 5 P Firmware Active Management Technology Firmware Manageability Engine Firmware Z170 Premium Firmware Z170 Deluxe Firmware Z170 Pro Firmware Z170 A Firmware Z170 Ar Firmware Z170 E Firmware Z170 K Firmware Z170 P Firmware Z170M Plus Firmware Z170M Plus Br Firmware Z170 P D3 Firmware Z170M E D3 Firmware Sabertooth Z170 Mark 1 Firmware Sabertooth Z170 S Firmware Rog Maximus Viii Extreme Firmware Rog Maximus Viii Ranger Firmware Rog Maximus Viii Formula Firmware Rog Maximus Viii Hero Firmware Rog Maximus Viii Hero Alpha Firmware Rog Maximus Viii Gene Firmware Rog Maximus Viii Impact Firmware Z170I Pro Gaming Firmware Z170 Pro Gaming Firmware Z170 Pro Gaming Aura Firmware B150 Pro Gaming Firmware B150 Pro Gaming Aura Firmware B150I Pro Gaming Wifi Aura Firmware B150I Pro Gaming Aura Firmware B150M Pro Gaming Firmware B150M A Firmware B150M A D3 Firmware B150M C D3 Firmware B150 A Firmware B150M D Firmware B150M K Firmware B150M Plus Firmware B150M F Plus Firmware B150 Plus Firmware B150M V Plus Firmware Ex B150M V Firmware Ex B150M V3 Firmware Ex B150M V5 Firmware Ex B150 V7 Firmware B150 Pro Firmware B150M A M 2 Firmware B150M C Firmware B150M C Br Firmware Pio B150M Firmware Trooper B150 D3 Firmware B150M Plus D3 Firmware B150 Pro Gaming D3 Firmware B150M K D3 Firmware B150 Pro D3 Firmware Ex H110M V Firmware Ex H110M V3 Firmware H110I Plus Firmware H110M A Dp Firmware H110M C Firmware H110M C Br Firmware H110M C Hdmi Firmware H110M C Ps Firmware H110M C2 Firmware H110M C2 Tf Firmware H110M Cs Firmware H110M Cs X Firmware H110M Cs Br Firmware H110M D Exper Si Firmware H110M K X Firmware H110M Ks Firmware H110M Ks R1 Firmware H110M P Dvi Firmware H110M Ts Firmware H110 Plus Firmware H110S1 Firmware H110S2 Firmware H110T Firmware H110T A Firmware H110M A M 2 Firmware H110M D Firmware H110M E Firmware H110M E M 2 Firmware H110M F Firmware H110M K Firmware H110M A Firmware Trooper H110 D3 Firmware H110M Plus Firmware H110M R Firmware Prime H110M2 Firmware Prime H110M2 Fpt Firmware Prime H110M P Firmware H110M K D3 Firmware H110M A D3 Firmware H170 Pro Firmware H170I Pro Firmware H170 Pro Gaming Firmware H170M Plus Firmware H170 Pro Usb 3 1 Firmware H170M Plus Br Firmware H170 Plus D3 Firmware H170M E D3 Firmware Ex B250 V7 Firmware B250 Mining Expert Firmware Prime B250M D Firmware Prime B250 A Firmware Prime B250M A Firmware Prime B250M J Firmware Prime B250M Plus Firmware Prime B250 Plus Firmware Prime B250M K Firmware Prime B250 Pro Firmware Rog Strix B250I Gaming Firmware Rog Strix B250G Gaming Firmware Rog Strix B250H Gaming Firmware Rog Strix B250F Gaming Firmware B250M C Pro Firmware B250M F Plus Firmware B250 Mr Firmware B250 S Firmware Ex B250M V Firmware Ex B250M V3 Firmware Ex B250M V5 Firmware Pio B250I Firmware Prime B250M C Firmware Prime B250M Plus Br Firmware Prime H270 Pro Firmware Prime H270 Plus Firmware Rog Strix H270I Gaming Firmware Rog Strix H270F Gaming Firmware Prime H270M Plus Firmware Rog Maximus Ix Extreme Firmware Rog Maximus Ix Formula Firmware Rog Maximus Ix Code Firmware Rog Maximus Ix Apex Firmware Rog Maximus Ix Hero Firmware Prime Z270 A Firmware Prime Z270 Ar Firmware Rog Strix Z270E Gaming Firmware Rog Strix Z270F Gaming Firmware Rog Strix Z270G Gaming Firmware Rog Strix Z270H Gaming Firmware Tuf Z270 Mark 1 Firmware Tuf Z270 Mark 2 Firmware Rog Strix Z270H Gaming K1 Firmware Prime Z270 K Firmware Prime Z270 P Firmware Rog Strix Z270I Gaming Firmware Prime Z270M Plus Firmware Prime Z270M Plus Br Firmware Q170M C Firmware Q170M Cm B Firmware Q170S1 Firmware Q170T Firmware Q170T V2 Firmware Q170M2 Firmware Q170M2 Cdm Si Firmware Prime Q270M C Firmware Q270M Cm A Firmware Q270 S Firmware Prime J3355I C Firmware Rog Maximus X Hero Firmware Rog Maximus X Formula Firmware Rog Maximus X Code Firmware Rog Maximus X Apex Firmware Prime Z370 A Firmware Prime Z370 P Firmware Tuf Z370 Pro Gaming Firmware Tuf Z370 Plus Gaming Firmware Rog Strix Z370 G Gaming Firmware Rog Strix Z370 E Gaming Firmware Rog Strix Z370 F Gaming Firmware Rog Strix Z370 H Gaming Firmware Rog Strix Z370 I Gaming Firmware Simatic Ipc477D Pro Firmware Simotion P320 4S Firmware Sinumerik Pcu50 5 C Firmware Asus
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 21, 2017 - 14:29 cve.org
HIGH 7.8

DescriptionCVE.org

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.

AnalysisAI

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege. Affected products include: Intel Manageability Engine Firmware, Intel Active Management Technology Firmware, Asus Z170-Premium Firmware, Asus Z170-Deluxe Firmware, Asus Z170-Pro Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

CVE-2017-5689 CRITICAL POC
9.8 May 02

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana

CVE-2018-3639 MEDIUM POC
5.5 May 22

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres

CVE-2021-33626 HIGH
7.8 Oct 01

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently

CVE-2017-5712 HIGH
7.2 Nov 21

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6

CVE-2020-8745 MEDIUM
6.8 Nov 12

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70

CVE-2018-3657 MEDIUM
6.7 Sep 12

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user

CVE-2018-3616 MEDIUM
5.9 Sep 12

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.

CVE-2020-8698 MEDIUM
5.5 Nov 12

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable

CVE-2020-0543 MEDIUM
5.5 Jun 15

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated

CVE-2018-3658 MEDIUM
5.3 Sep 12

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with

Share

CVE-2017-5711 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy