CVE-2017-5712
High
Description
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
SeverityHigh
CVSS7.2
Exploit probability—
ProductIntel Manageability Engine Firmware
PublishedNov 21, 2017
First seenNov 21, 2017
How to fix
Update
- siemens simatic_field_pg_m3_firmware6.2.61.3535 or later
- siemens simatic_field_pg_m4_firmware18.01.06 or later
- siemens simatic_field_pg_m5_firmware22.01.04 or later
- siemens simatic_ipc677c_firmware6.2.61.3535 or later
- siemens simatic_ipc427e_firmware21.01.07 or later
- siemens simatic_ipc477e_firmware21.01.07 or later
- siemens simatic_ipc547d_firmware7.1.91.3272 or later
- siemens simatic_ipc547e_firmware9.1.41.3024 or later
- siemens simatic_ipc627c_firmware6.2.61.3535 or later
- siemens simatic_ipc627d_firmware9.1.41.3024 or later
- siemens simatic_ipc647c_firmware6.2.61.3535 or later
- siemens simatic_ipc647d_firmware9.1.41.3024 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel manageability_engine_firmware | 8.0.0.0 ≤ v ≤ 8.1.71.3608, 9.0.0.0 ≤ v ≤ 9.1.41.3024, 10.0.0.0 ≤ v ≤ 10.0.55.3000, 11.0, 11.5, 11.6, 11.7, 11.10, 11.20 | — |
| intel active_management_technology_firmware | No range specified | — |
| asus z170-premium_firmware | No range specified | — |
| asus z170-deluxe_firmware | No range specified | — |
| asus z170-pro_firmware | No range specified | — |
| asus z170-a_firmware | No range specified | — |
| asus z170-ar_firmware | No range specified | — |
| asus z170-e_firmware | No range specified | — |
| asus z170-k_firmware | No range specified | — |
| asus z170-p_firmware | No range specified | — |
| asus z170m-plus_firmware | No range specified | — |
| asus z170m-plus\/br_firmware | No range specified | — |
| asus z170-p_d3_firmware | No range specified | — |
| asus z170m-e_d3_firmware | No range specified | — |
| asus sabertooth_z170_mark_1_firmware | No range specified | — |
| asus sabertooth_z170_s_firmware | No range specified | — |
| asus rog_maximus_viii_extreme_firmware | No range specified | — |
| asus rog_maximus_viii_ranger_firmware | No range specified | — |
| asus rog_maximus_viii_formula_firmware | No range specified | — |
| asus rog_maximus_viii_hero_firmware | No range specified | — |
| asus rog_maximus_viii_hero_alpha_firmware | No range specified | — |
| asus rog_maximus_viii_gene_firmware | No range specified | — |
| asus rog_maximus_viii_impact_firmware | No range specified | — |
| asus z170i_pro_gaming_firmware | No range specified | — |
| asus z170_pro_gaming_firmware | No range specified | — |
| asus z170_pro_gaming\/aura_firmware | No range specified | — |
| asus b150_pro_gaming_firmware | No range specified | — |
| asus b150_pro_gaming\/aura_firmware | No range specified | — |
| asus b150i_pro_gaming\/wifi\/aura_firmware | No range specified | — |
| asus b150i_pro_gaming\/aura_firmware | No range specified | — |
| asus b150m_pro_gaming_firmware | No range specified | — |
| asus b150m-a_firmware | No range specified | — |
| asus b150m-a_d3_firmware | No range specified | — |
| asus b150m-c_d3_firmware | No range specified | — |
| asus b150-a_firmware | No range specified | — |
| asus b150m-d_firmware | No range specified | — |
| asus b150m-k_firmware | No range specified | — |
| asus b150m-plus_firmware | No range specified | — |
| asus b150m-f_plus_firmware | No range specified | — |
| asus b150-plus_firmware | No range specified | — |
| asus b150m-v_plus_firmware | No range specified | — |
| asus ex-b150m-v_firmware | No range specified | — |
| asus ex-b150m-v3_firmware | No range specified | — |
| asus ex-b150m-v5_firmware | No range specified | — |
| asus ex-b150-v7_firmware | No range specified | — |
| asus b150-pro_firmware | No range specified | — |
| asus b150m-a\/m.2_firmware | No range specified | — |
| asus b150m-c_firmware | No range specified | — |
| asus b150m-c\/br_firmware | No range specified | — |
| asus pio-b150m_firmware | No range specified | — |
| asus trooper_b150_d3_firmware | No range specified | — |
| asus b150m-plus_d3_firmware | No range specified | — |
| asus b150_pro_gaming_d3_firmware | No range specified | — |
| asus b150m-k_d3_firmware | No range specified | — |
| asus b150-pro_d3_firmware | No range specified | — |
| asus ex-h110m-v_firmware | No range specified | — |
| asus ex-h110m-v3_firmware | No range specified | — |
| asus h110i-plus_firmware | No range specified | — |
| asus h110m-a\/dp_firmware | No range specified | — |
| asus h110m-c_firmware | No range specified | — |
| asus h110m-c\/br_firmware | No range specified | — |
| asus h110m-c\/hdmi_firmware | No range specified | — |
| asus h110m-c\/ps_firmware | No range specified | — |
| asus h110m-c2_firmware | No range specified | — |
| asus h110m-c2\/tf_firmware | No range specified | — |
| asus h110m-cs_firmware | No range specified | — |
| asus h110m-cs_x_firmware | No range specified | — |
| asus h110m-cs\/br_firmware | No range specified | — |
| asus h110m-d\/exper\/si_firmware | No range specified | — |
| asus h110m-k_x_firmware | No range specified | — |
| asus h110m-ks_firmware | No range specified | — |
| asus h110m-ks_r1_firmware | No range specified | — |
| asus h110m-p\/dvi_firmware | No range specified | — |
| asus h110m-ts_firmware | No range specified | — |
| asus h110-plus_firmware | No range specified | — |
| asus h110s1_firmware | No range specified | — |
| asus h110s2_firmware | No range specified | — |
| asus h110t_firmware | No range specified | — |
| asus h110t-a_firmware | No range specified | — |
| asus h110m-a\/m.2_firmware | No range specified | — |
| asus h110m-d_firmware | No range specified | — |
| asus h110m-e_firmware | No range specified | — |
| asus h110m-e\/m.2_firmware | No range specified | — |
| asus h110m-f_firmware | No range specified | — |
| asus h110m-k_firmware | No range specified | — |
| asus h110m-a_firmware | No range specified | — |
| asus trooper_h110_d3_firmware | No range specified | — |
| asus h110m-plus_firmware | No range specified | — |
| asus h110m-r_firmware | No range specified | — |
| asus prime_h110m2_firmware | No range specified | — |
| asus prime_h110m2\/fpt_firmware | No range specified | — |
| asus prime_h110m-p_firmware | No range specified | — |
| asus h110m-k_d3_firmware | No range specified | — |
| asus h110m-a_d3_firmware | No range specified | — |
| asus h170-pro_firmware | No range specified | — |
| asus h170i-pro_firmware | No range specified | — |
| asus h170_pro_gaming_firmware | No range specified | — |
| asus h170m-plus_firmware | No range specified | — |
| asus h170-pro\/usb_3.1_firmware | No range specified | — |
| asus h170m-plus\/br_firmware | No range specified | — |
| asus h170-plus_d3_firmware | No range specified | — |
| asus h170m-e_d3_firmware | No range specified | — |
| asus ex-b250-v7_firmware | No range specified | — |
| asus b250_mining_expert_firmware | No range specified | — |
| asus prime_b250m-d_firmware | No range specified | — |
| asus prime_b250-a_firmware | No range specified | — |
| asus prime_b250m-a_firmware | No range specified | — |
| asus prime_b250m-j_firmware | No range specified | — |
| asus prime_b250m-plus_firmware | No range specified | — |
| asus prime_b250-plus_firmware | No range specified | — |
| asus prime_b250m-k_firmware | No range specified | — |
| asus prime_b250-pro_firmware | No range specified | — |
| asus rog_strix_b250i_gaming_firmware | No range specified | — |
| asus rog_strix_b250g_gaming_firmware | No range specified | — |
| asus rog_strix_b250h_gaming_firmware | No range specified | — |
| asus rog_strix_b250f_gaming_firmware | No range specified | — |
| asus b250m-c_pro_firmware | No range specified | — |
| asus b250m-f_plus_firmware | No range specified | — |
| asus b250-mr_firmware | No range specified | — |
| asus b250-s_firmware | No range specified | — |
| asus ex-b250m-v_firmware | No range specified | — |
| asus ex-b250m-v3_firmware | No range specified | — |
| asus ex-b250m-v5_firmware | No range specified | — |
| asus pio-b250i_firmware | No range specified | — |
| asus prime_b250m-c_firmware | No range specified | — |
| asus prime_b250m-plus\/br_firmware | No range specified | — |
| asus prime_h270-pro_firmware | No range specified | — |
| asus prime_h270-plus_firmware | No range specified | — |
| asus rog_strix_h270i_gaming_firmware | No range specified | — |
| asus rog_strix_h270f_gaming_firmware | No range specified | — |
| asus prime_h270m-plus_firmware | No range specified | — |
| asus rog_maximus_ix_extreme_firmware | No range specified | — |
| asus rog_maximus_ix_formula_firmware | No range specified | — |
| asus rog_maximus_ix_code_firmware | No range specified | — |
| asus rog_maximus_ix_apex_firmware | No range specified | — |
| asus rog_maximus_ix_hero_firmware | No range specified | — |
| asus prime_z270-a_firmware | No range specified | — |
| asus prime_z270-ar_firmware | No range specified | — |
| asus rog_strix_z270e_gaming_firmware | No range specified | — |
| asus rog_strix_z270f_gaming_firmware | No range specified | — |
| asus rog_strix_z270g_gaming_firmware | No range specified | — |
| asus rog_strix_z270h_gaming_firmware | No range specified | — |
| asus tuf_z270_mark_1_firmware | No range specified | — |
| asus tuf_z270_mark_2_firmware | No range specified | — |
| asus rog_strix_z270h_gaming\/k1_firmware | No range specified | — |
| asus prime_z270-k_firmware | No range specified | — |
| asus prime_z270-p_firmware | No range specified | — |
| asus rog_strix_z270i_gaming_firmware | No range specified | — |
| asus prime_z270m-plus_firmware | No range specified | — |
| asus prime_z270m-plus\/br_firmware | No range specified | — |
| asus q170m-c_firmware | No range specified | — |
| asus q170m-cm-b_firmware | No range specified | — |
| asus q170s1_firmware | No range specified | — |
| asus q170t_firmware | No range specified | — |
| asus q170t_v2_firmware | No range specified | — |
| asus q170m2_firmware | No range specified | — |
| asus q170m2\/cdm\/si_firmware | No range specified | — |
| asus prime_q270m-c_firmware | No range specified | — |
| asus q270m-cm-a_firmware | No range specified | — |
| asus q270-s_firmware | No range specified | — |
| asus prime_j3355i-c_firmware | No range specified | — |
| asus rog_maximus_x_hero_firmware | No range specified | — |
| asus rog_maximus_x_formula_firmware | No range specified | — |
| asus rog_maximus_x_code_firmware | No range specified | — |
| asus rog_maximus_x_apex_firmware | No range specified | — |
| asus prime_z370-a_firmware | No range specified | — |
| asus prime_z370-p_firmware | No range specified | — |
| asus tuf_z370-pro_gaming_firmware | No range specified | — |
| asus tuf_z370-plus_gaming_firmware | No range specified | — |
| asus rog_strix_z370-g_gaming_firmware | No range specified | — |
| asus rog_strix_z370-e_gaming_firmware | No range specified | — |
| asus rog_strix_z370-f_gaming_firmware | No range specified | — |
| asus rog_strix_z370-h_gaming_firmware | No range specified | — |
| asus rog_strix_z370-i_gaming_firmware | No range specified | — |
| siemens simatic_field_pg_m3_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_field_pg_m4_firmware | v < 18.01.06 | 18.01.06 |
| siemens simatic_field_pg_m5_firmware | v < 22.01.04 | 22.01.04 |
| siemens simatic_ipc677c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc427d_firmware | No range specified | — |
| siemens simatic_ipc427e_firmware | v < 21.01.07 | 21.01.07 |
| siemens simatic_ipc477d_firmware | No range specified | — |
| siemens simatic_ipc477d_pro_firmware | No range specified | — |
| siemens simatic_ipc477e_firmware | v < 21.01.07 | 21.01.07 |
| siemens simatic_ipc547d_firmware | v < 7.1.91.3272 | 7.1.91.3272 |
| siemens simatic_ipc547e_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc627c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc627d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc647c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc647d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc677d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc827c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc827d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.