Buffer overflow in Intel Manageability Firmware - CVE-2017-5708

Vulnerability identifier: #VU9391

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5708

CWE-ID: CWE-120

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The weakness exists due to multiple buffer overflows in Active Management Technology (AMT). A local attacker with access to the system can send a specially crafted request, trigger memory corruption, execute arbitrary code with AMT execution privilege and compromise the vulnerable system.

Intel Manageability Firmware
SIMATIC IPC627D
SIMOTION P320-4S
SINUMERIK PCU50.5-P
WINXP
WIN7
SINUMERIK PCU50.5-C
SIMATIC ITP1000
SIMATIC IPC847D
SIMATIC IPC847C
SIMATIC IPC827D
SIMATIC IPC827C
SIMATIC IPC677D
SIMATIC IPC647D
SIMATIC IPC647C
SIMATIC Field-PG M3
SIMATIC IPC627C
SIMATIC IPC547G
SIMATIC IPC547E
SIMATIC IPC547D
SIMATIC IPC477E
SIMATIC IPC477D PRO
SIMATIC IPC477D
SIMATIC IPC427E
SIMATIC IPC427D
SIMATIC HMI IPC677C
SIMATIC Field-PG M5
SIMATIC Field-PG M4

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

• Arbitrary code execution in Intel Manageability Firmware
• Multiple vulnerabilities in Siemens SIMATIC, SIMOTION, and SINUMERIK