What is CVE-2017-5691?

CVE-2017-5691 is a critical-severity vulnerability in Intel Lr1304spcfg1. CVSS score: 9.0/10. Published 2017-07-26.

How severe is CVE-2017-5691?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Vulnerability in Intel Lr1304spcfg1

CVE-2017-5691

Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.

EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Intel Lr1304spcfg1
Intel Lr1304spcfg1_bios
Intel Lr1304spcfg1r
Intel Lr1304spcfg1r_bios
Intel Nuc6i3syk
Intel Nuc6i3syk_bios
Intel Nuc6i5syk
Intel Nuc6i5syk_bios
Intel Nuc6i7kyk
Intel Nuc6i7kyk_bios

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
secure@intel.com (x_refsource_CONFIRM)
secure@intel.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2017-5691?: CVE-2017-5691 is a critical-severity vulnerability in Intel Lr1304spcfg1. CVSS score: 9.0/10. Published 2017-07-26.
How severe is CVE-2017-5691?: Critical severity. CVSS v3 base score is 9.0 out of 10.