6.7med
CVE-2017-5704
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.7
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 22%
Public exploits
0
none known
Summary
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.
Exploit prediction (EPSS)
0.29% probability of exploitation in the next 30 days, higher than 22% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.7 | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Intel Corporation Intel Core Processor
Classification
- Weakness
- CWE-522 Insufficiently Protected Credentials
References
- intel.com /content/www/us/en/security-center/advisory/intel-sa-00160.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-5704
- NVD: CVE-2017-5704
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.