9
CVSSv3

CVE-2017-5691

Published: 26/07/2017 Updated: 03/10/2019
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 9 | Impact Score: 6 | Exploitability Score: 2.3
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

intel nuc7i3bnk bios -

intel nuc7i5bnk bios -

intel nuc7i7bnh bios -

intel stk2mv64cc bios -

intel stk2m3w64cc bios -

intel nuc6i7kyk bios -

intel nuc6i3syk bios -

intel nuc6i5syk bios -

intel r1304sposhor bios -

intel r1304sposhorr bios -

intel r1208sposhorr bios -

intel lr1304spcfg1r bios -

intel r1208sposhor bios -

intel s1200spsr bios -

intel s1200spor bios -

intel lr1304spcfg1 bios -

intel s1200spl bios -

intel s1200spo bios -

intel s1200sps bios -

intel r1304sposhbn bios -

intel s1200splr bios -

intel r1304sposhbnr bios -

Vendor Advisories

Intel has discovered a vulnerability that could impact the security of Intel® Software Guard Extensions (Intel® SGX) Before exploiting this vulnerability, the malicious party would first need to control/modify BIOS code, which would require either physical access or discovering and exploiting a separate vulnerability ...