CVE-2017-5704
Last modified
CVE-2017-5704 is a vulnerability of currently unknown severity. Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I3 | 4000m |
| Intel | Core I3 | 4005u |
| Intel | Core I3 | 4010u |
| Intel | Core I3 | 4010y |
| Intel | Core I3 | 4012y |
| Intel | Core I3 | 4020y |
| Intel | Core I3 | 4025u |
| Intel | Core I3 | 4030u |
| Intel | Core I3 | 4030y |
| Intel | Core I3 | 4100e |
| Intel | Core I3 | 4100m |
| Intel | Core I3 | 4100u |
| Intel | Core I3 | 4102e |
| Intel | Core I3 | 4110e |
| Intel | Core I3 | 4110m |
| Intel | Core I3 | 4112e |
| Intel | Core I3 | 4120u |
| Intel | Core I3 | 4130 |
| Intel | Core I3 | 4130t |
| Intel | Core I3 | 4150 |
| Intel | Core I3 | 4150t |
| Intel | Core I3 | 4158u |
| Intel | Core I3 | 4160 |
| Intel | Core I3 | 4160t |
| Intel | Core I3 | 4170 |
| Intel | Core I3 | 4170t |
| Intel | Core I3 | 4330 |
| Intel | Core I3 | 4330t |
| Intel | Core I3 | 4330te |
| Intel | Core I3 | 4340 |
| Intel | Core I3 | 4340te |
| Intel | Core I3 | 4350 |
| Intel | Core I3 | 4350t |
| Intel | Core I3 | 4360 |
| Intel | Core I3 | 4360t |
| Intel | Core I3 | 4370 |
| Intel | Core I3 | 4370t |
| Intel | Core I3 | 5005u |
| Intel | Core I3 | 5010u |
| Intel | Core I3 | 5015u |
| Intel | Core I3 | 5020u |
| Intel | Core I3 | 5157u |
| Intel | Core I3 | 6006u |
| Intel | Core I3 | 6098p |
| Intel | Core I3 | 6100 |
| Intel | Core I3 | 6100e |
| Intel | Core I3 | 6100h |
| Intel | Core I3 | 6100t |
| Intel | Core I3 | 6100te |
| Intel | Core I3 | 6100u |
Showing 50 of 273 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5704?
How severe is CVE-2017-5704?
How do I fix CVE-2017-5704?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-5698Intel Active Management Technology, Intel Standard Manageabi…4.4
- CVE-2017-5699Input validation error in Intel MinnowBoard 3 Firmware versi…
- CVE-2017-5700Insufficient protection of password storage in system firmwa…
- CVE-2017-5701Insecure platform configuration in system firmware for Intel…
- CVE-2017-5702Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-5703Configuration of SPI Flash in platforms based on multiple In…
- CVE-2017-5705Multiple buffer overflows in kernel in Intel Manageability E…
- CVE-2017-5706Multiple buffer overflows in kernel in Intel Server Platform…
- CVE-2017-5707Multiple buffer overflows in kernel in Intel Trusted Executi…
- CVE-2017-5708Multiple privilege escalations in kernel in Intel Manageabil…
- CVE-2017-5709Multiple privilege escalations in kernel in Intel Server Pla…
- CVE-2017-5710Multiple privilege escalations in kernel in Intel Trusted Ex…
Are you affected by CVE-2017-5704?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
