← Vulnerability feed

Vulnerability record · CVE-2017-5704 · published 10 July 2018

CVE-2017-5704: Intel core i3 insufficiently protected credentials vulnerability

Intel · Core I3

Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.

6.7 CVSS 3.0 Medium EPSS 0.29% · top 80.4% CWE-522 · Insufficiently protected credentials
6.7CVSS 3.0 base score, v2 2.1
0.29%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html Vendor Advisory

Track CVE-2017-5704 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2018-12169Intel core i3 improper authentication vulnerabilityPlatform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th G…EPSS 0.55%7.3CVE-2018-3615Intel core i3 observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of inf…EPSS 6.3%6.7CVE-2021-0114Intel atom c3000 insecure default initialization vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via …EPSS 0.27%6.7CVE-2021-0144Intel atom c3000 insecure default initialization vulnerabilityInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege …EPSS 0.33%5.6CVE-2018-3620Intel core i3 observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in th…EPSS 5.6%5.6CVE-2018-3646Intel core i3 information exposure vulnerabilitySystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in th…EPSS 8.6%5.6CVE-2018-3693Intel atom c vulnerabilitySystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker wi…EPSS 8.6%5.6CVE-2018-3665Intel core i3 information exposure vulnerabilitySystem software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to …EPSS 0.63%

Source: NIST National Vulnerability Database (record CVE-2017-5704), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.