Buffer overflow in Intel Manageability Firmware - CVE-2017-5712

Vulnerability identifier: #VU9393

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5712

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote administrator to execute arbitrary code on the target system.

The weakness exists due to buffer overflow in Active Management Technology (AMT). A remote attacker with access to the system can send a specially crafted request, trigger memory corruption, execute arbitrary code with AMT execution privilege and compromise the vulnerable system.

Intel Manageability Firmware
SIMATIC IPC627D
SIMOTION P320-4S
SINUMERIK PCU50.5-P
WINXP
WIN7
SINUMERIK PCU50.5-C
SIMATIC ITP1000
SIMATIC IPC847D
SIMATIC IPC847C
SIMATIC IPC827D
SIMATIC IPC827C
SIMATIC IPC677D
SIMATIC IPC647D
SIMATIC IPC647C
SIMATIC Field-PG M3
SIMATIC IPC627C
SIMATIC IPC547G
SIMATIC IPC547E
SIMATIC IPC547D
SIMATIC IPC477E
SIMATIC IPC477D PRO
SIMATIC IPC477D
SIMATIC IPC427E
SIMATIC IPC427D
SIMATIC HMI IPC677C
SIMATIC Field-PG M5
SIMATIC Field-PG M4

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

• Arbitrary code execution in Intel Manageability Firmware
• Multiple vulnerabilities in Siemens SIMATIC, SIMOTION, and SINUMERIK