What is CVE-2017-5704?

CVE-2017-5704 is a medium-severity vulnerability in Intel Core I3, classified under Insufficiently Protected Credentials. CVSS score: 6.7/10. Published 2018-07-10.

How severe is CVE-2017-5704?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Core I3

CVE-2017-5704

Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.

Published 2018-07-10 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (22.0th percentile), scored 2026-11-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 22.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

Intel Core I3 — versions 4000m, 4005u, 4010u
Intel Core I5 — versions 7y54, 7y57, 4200h
Intel Core I7 — versions 7y75, 4500u, 4510u
Intel Corporation Core Processor — versions 4th Gen, 5th Gen, 6th Gen, 7th Gen.

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html (Vendor Advisory)

Frequently asked questions

What is CVE-2017-5704?: CVE-2017-5704 is a medium-severity vulnerability in Intel Core I3, classified under Insufficiently Protected Credentials. CVSS score: 6.7/10. Published 2018-07-10.
How severe is CVE-2017-5704?: Medium severity. CVSS v3 base score is 6.7 out of 10.