CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
5.2%
Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.
Vendor | Product | Version | CPE |
---|---|---|---|
intel | manageability_engine_firmware | 11.0 | cpe:2.3:o:intel:manageability_engine_firmware:11.0:*:*:*:*:*:*:* |
intel | manageability_engine_firmware | 11.5 | cpe:2.3:o:intel:manageability_engine_firmware:11.5:*:*:*:*:*:*:* |
intel | manageability_engine_firmware | 11.6 | cpe:2.3:o:intel:manageability_engine_firmware:11.6:*:*:*:*:*:*:* |
intel | manageability_engine_firmware | 11.7 | cpe:2.3:o:intel:manageability_engine_firmware:11.7:*:*:*:*:*:*:* |
intel | manageability_engine_firmware | 11.10 | cpe:2.3:o:intel:manageability_engine_firmware:11.10:*:*:*:*:*:*:* |
intel | manageability_engine_firmware | 11.20 | cpe:2.3:o:intel:manageability_engine_firmware:11.20:*:*:*:*:*:*:* |
www.securityfocus.com/bid/101917
www.securitytracker.com/id/1039852
cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
security.netapp.com/advisory/ntap-20171120-0001/
twitter.com/PTsecurity_UK/status/938447926128291842
www.asus.com/News/wzeltG5CjYaIwGJ0
www.synology.com/support/security/Synology_SA_17_73
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
5.2%