← Vulnerability feed

Vulnerability record · CVE-2017-5709 · published 21 November 2017

CVE-2017-5709: Intel server platform services firmware vulnerability

Intel · Server Platform Services Firmware

Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector.

7.8 CVSS 3.0 High EPSS 0.58% · top 54.7%
7.8CVSS 3.0 base score, v2 7.2
0.58%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
17 Jun 2026Last modified by NVD

Description

Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Issue TrackingPatchThird Party Advisory
http://www.securityfocus.com/bid/101906 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039955 Third Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr Issue TrackingVendor Advisory
https://security.netapp.com/advisory/ntap-20171120-0001/ Issue TrackingThird Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
https://www.asus.com/News/wzeltG5CjYaIwGJ0
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Issue TrackingPatchThird Party Advisory
http://www.securityfocus.com/bid/101906 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039955 Third Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr Issue TrackingVendor Advisory
https://security.netapp.com/advisory/ntap-20171120-0001/ Issue TrackingThird Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
https://www.asus.com/News/wzeltG5CjYaIwGJ0

Track CVE-2017-5709 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2018-3643Intel converged security management engine firmware vulnerabilityA vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before ver…EPSS 0.48%7.8CVE-2017-5706Intel server platform services firmware memory buffer overflow vulnerabilityMultiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrar…EPSS 0.69%7.6CVE-2018-12191Intel converged security management engine firmware memory buffer overflow vulnerabilityBounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before ver…EPSS 0.48%7.6CVE-2018-12208Intel converged security management engine firmware memory buffer overflow vulnerabilityBuffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4…EPSS 0.51%7.3CVE-2018-3655Intel converged security management engine firmware vulnerabilityA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution E…EPSS 0.46%6.8CVE-2019-0099Intel server platform services firmware vulnerabilityInsufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to pote…EPSS 0.40%6.8CVE-2018-12192Intel converged security management engine firmware improper authentication vulnerabilityLogic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versio…EPSS 0.47%6.7CVE-2018-12147Intel converged security management engine firmware improper input validation vulnerabilityInsufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Inte…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2017-5709), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.