What is CVE-2017-5704?

CVE-2017-5704 is a medium-severity vulnerability in Intel Core_i3, classified under Insufficiently Protected Credentials. CVSS score: 6.7/10. Published 2018-07-10.

How severe is CVE-2017-5704?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Core_i3

CVE-2017-5704

Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker w…

EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Core_i3 — versions 4000m, 4005u, 4010u
Intel Core_i5 — versions 7y54, 7y57, 4200h
Intel Core_i7 — versions 7y75, 4500u, 4510u
Intel Corporation Core Processor — versions 4th Gen, 5th Gen, 6th Gen, 7th Gen.

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-5704?: CVE-2017-5704 is a medium-severity vulnerability in Intel Core_i3, classified under Insufficiently Protected Credentials. CVSS score: 6.7/10. Published 2018-07-10.
How severe is CVE-2017-5704?: Medium severity. CVSS v3 base score is 6.7 out of 10.