Security Advisory - Multiple Vulnerabilities in Intel Management Engine Firmware

There are multiple vulnerabilities in Intel Management Engine (ME) firmware. Some Huawei devices are affected for using related Intel products.
Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code. (Vulnerability ID: HWPSIRT-2017-11005)
This vulnerability has been assigned a CVE ID: CVE-2017-5705.

Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector. (Vulnerability ID: HWPSIRT-2017-11006)
This vulnerability has been assigned a CVE ID: CVE-2017-5708.

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege. (Vulnerability ID: HWPSIRT-2017-11007)
This vulnerability has been assigned a CVE ID: CVE-2017-5711.

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege. (Vulnerability ID: HWPSIRT-2017-11008)
This vulnerability has been assigned a CVE ID: CVE-2017-5712.

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code. (Vulnerability ID: HWPSIRT-2017-11009)
This vulnerability has been assigned a CVE ID: CVE-2017-5706.

Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector. (Vulnerability ID: HWPSIRT-2017-11010)
This vulnerability has been assigned a CVE ID: CVE-2017-5709.

Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code. (Vulnerability ID: HWPSIRT-2017-11011)
This vulnerability has been assigned a CVE ID: CVE-2017-5707.

Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecified vector. (Vulnerability ID: HWPSIRT-2017-11012)
This vulnerability has been assigned a CVE ID: CVE-2017-5710.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-intel-en