Information disclosure in Intel Trusted Execution Engine Firmware - CVE-2017-5710
Published: March 1, 2018 / Updated: March 2, 2018
Vulnerability identifier: #VU10808
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-5710
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to multiple privilege escalations in kernel. A remote attacker can run unauthorized process to access privileged content via unspecified vector.
Affected software
Intel Trusted Execution Engine Firmware
SIMATIC IPC627D
SIMOTION P320-4S
SINUMERIK PCU50.5-P
WINXP
WIN7
SINUMERIK PCU50.5-C
SIMATIC ITP1000
SIMATIC IPC847D
SIMATIC IPC847C
SIMATIC IPC827D
SIMATIC IPC827C
SIMATIC IPC677D
SIMATIC IPC647D
SIMATIC IPC647C
SIMATIC Field-PG M3
SIMATIC IPC627C
SIMATIC IPC547G
SIMATIC IPC547E
SIMATIC IPC547D
SIMATIC IPC477E
SIMATIC IPC477D PRO
SIMATIC IPC477D
SIMATIC IPC427E
SIMATIC IPC427D
SIMATIC HMI IPC677C
SIMATIC Field-PG M5
SIMATIC Field-PG M4
SIMATIC IPC627D
SIMOTION P320-4S
SINUMERIK PCU50.5-P
WINXP
WIN7
SINUMERIK PCU50.5-C
SIMATIC ITP1000
SIMATIC IPC847D
SIMATIC IPC847C
SIMATIC IPC827D
SIMATIC IPC827C
SIMATIC IPC677D
SIMATIC IPC647D
SIMATIC IPC647C
SIMATIC Field-PG M3
SIMATIC IPC627C
SIMATIC IPC547G
SIMATIC IPC547E
SIMATIC IPC547D
SIMATIC IPC477E
SIMATIC IPC477D PRO
SIMATIC IPC477D
SIMATIC IPC427E
SIMATIC IPC427D
SIMATIC HMI IPC677C
SIMATIC Field-PG M5
SIMATIC Field-PG M4
How to mitigate CVE-2017-5710
Install update from vendor's website.