← Vulnerability feed

Vulnerability record · CVE-2017-5706 · published 21 November 2017

CVE-2017-5706: Intel server platform services firmware memory buffer overflow vulnerability

Intel · Server Platform Services Firmware

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.

7.8 CVSS 3.0 High EPSS 0.69% · top 49.3% CWE-119 · Memory buffer overflow
7.8CVSS 3.0 base score, v2 7.2
0.69%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
17 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Issue TrackingPatchThird Party Advisory
http://www.securityfocus.com/bid/101906 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039955 Third Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr Issue TrackingVendor Advisory
https://security.netapp.com/advisory/ntap-20171120-0001/ Issue TrackingThird Party AdvisoryTool Signature
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
https://twitter.com/PTsecurity_UK/status/938447926128291842
https://www.asus.com/News/wzeltG5CjYaIwGJ0
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Issue TrackingPatchThird Party Advisory
http://www.securityfocus.com/bid/101906 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039955 Third Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr Issue TrackingVendor Advisory
https://security.netapp.com/advisory/ntap-20171120-0001/ Issue TrackingThird Party AdvisoryTool Signature
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
https://twitter.com/PTsecurity_UK/status/938447926128291842
https://www.asus.com/News/wzeltG5CjYaIwGJ0

Track CVE-2017-5706 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2018-3643Intel converged security management engine firmware vulnerabilityA vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before ver…EPSS 0.48%7.8CVE-2017-5709Intel server platform services firmware vulnerabilityMultiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via …EPSS 0.58%7.6CVE-2018-12191Intel converged security management engine firmware memory buffer overflow vulnerabilityBounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before ver…EPSS 0.48%7.6CVE-2018-12208Intel converged security management engine firmware memory buffer overflow vulnerabilityBuffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4…EPSS 0.51%7.3CVE-2018-3655Intel converged security management engine firmware vulnerabilityA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution E…EPSS 0.46%6.8CVE-2019-0099Intel server platform services firmware vulnerabilityInsufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to pote…EPSS 0.40%6.8CVE-2018-12192Intel converged security management engine firmware improper authentication vulnerabilityLogic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versio…EPSS 0.47%6.7CVE-2018-12147Intel converged security management engine firmware improper input validation vulnerabilityInsufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Inte…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2017-5706), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.