CVE-2017-5703

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.

Metrics

CVSS 3.0 6.0/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Intel Corporation	Intel 6th generation Intel Core Processors, Intel 7th generation Processors, Intel Xeon Scalable Processors, Intel Xeon Processor E3 v5 Family, Intel Xeon Processor E3 v6 Family, and Intel Atom Proces	All

References

http://www.securitytracker.com/id/1040626Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00087&languageid=en-frVendor Advisory
https://security.netapp.com/advisory/ntap-20180924-0004/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03867en_us
http://www.securitytracker.com/id/1040626Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00087&languageid=en-frVendor Advisory
https://security.netapp.com/advisory/ntap-20180924-0004/
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03867en_us

Timeline

Published: Apr 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-57046.7Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7t CVE-2017-57057.8Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access CVE-2017-57067.8Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute CVE-2017-57077.8Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute CVE-2017-57087.8Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process t CVE-2017-57097.8Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged con CVE-2017-57107.8Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged con CVE-2017-57117.8Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1 CVE-2017-57127.2Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 al CVE-2017-57155.6Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information CVE-2017-57177.8Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access.CVE-2017-57199.8A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user.