cbcvebase.
CVE-2017-5711
published 2017-11-21

CVE-2017-5711: Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow…

PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.57%
43.4th percentile
Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
intelmanageability_engine_firmware——
intelmanageability_engine_firmware——
intelmanageability_engine_firmware——
intelmanageability_engine_firmware——
intelmanageability_engine_firmware——
intelmanageability_engine_firmware——
intelmanageability_engine_firmware10.0.0.0 – 10.0.55.3000—
intelmanageability_engine_firmware8.0.0.0 – 8.1.71.3608—
intelmanageability_engine_firmware9.0.0.0 – 9.1.41.3024—
intel_corporationactive_management_technology——
siemenssimatic_field_pg_m3_firmware< 6.2.61.35356.2.61.3535
siemenssimatic_field_pg_m4_firmware< 18.01.0618.01.06
siemenssimatic_field_pg_m5_firmware< 22.01.0422.01.04
siemenssimatic_ipc427e_firmware< 21.01.0721.01.07
siemenssimatic_ipc477e_firmware< 21.01.0721.01.07
siemenssimatic_ipc547d_firmware< 7.1.91.32727.1.91.3272
siemenssimatic_ipc547e_firmware< 9.1.41.30249.1.41.3024
siemenssimatic_ipc627c_firmware< 6.2.61.35356.2.61.3535
siemenssimatic_ipc627d_firmware< 9.1.41.30249.1.41.3024
siemenssimatic_ipc647c_firmware< 6.2.61.35356.2.61.3535
siemenssimatic_ipc647d_firmware< 9.1.41.30249.1.41.3024
siemenssimatic_ipc677c_firmware< 6.2.61.35356.2.61.3535
siemenssimatic_ipc677d_firmware< 9.1.41.30249.1.41.3024
siemenssimatic_ipc827c_firmware< 6.2.61.35356.2.61.3535
siemenssimatic_ipc827d_firmware< 9.1.41.30249.1.41.3024

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.