CVSS 3.0
9.0 criticalCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:HCVE-2017-5691
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:lr1304spcfg1_bios
- intel:lr1304spcfg1r_bios
- intel:nuc6i3syk_bios
- intel:nuc6i5syk_bios
- intel:nuc6i7kyk_bios
- intel:nuc7i3bnk_bios
- intel:nuc7i5bnk_bios
- intel:nuc7i7bnh_bios
- intel:r1208sposhor_bios
- intel:r1208sposhorr_bios
- intel:r1304sposhbn_bios
- intel:r1304sposhbnr_bios
- intel:r1304sposhor_bios
- intel:r1304sposhorr_bios
- intel:s1200spl_bios
- intel:s1200splr_bios
- intel:s1200spo_bios
- intel:s1200spor_bios
- intel:s1200sps_bios
- intel:s1200spsr_bios
- intel:stk2m3w64cc_bios
- intel:stk2mv64cc_bios
References
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr
- https://support.lenovo.com/us/en/product_security/LEN-15184
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesb3p03767en_us
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00076&languageid=en-fr