CVE-2017-5691
First published: Wed Jul 26 2017(Updated: )
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel NUC mini pc NUC7i3BNK | ||
| Intel NUC kit nuc7i3bnk | ||
| Intel NUC 7i5BNK BIOS | ||
| Intel NUC 7i5-BNK | ||
| Intel NUC 7i7BNH BIOS | ||
| Intel NUC NUC7i7BNH | ||
| Intel STK2M3W64CC BIOS | ||
| Intel Compute Stick STK2MV64CC | ||
| Intel STK2M3W64CC BIOS | ||
| Intel Compute Stick STK2M3W64CC Firmware | ||
| Intel NUC 6i7KYK BIOS | ||
| Intel NUC6i7KYK Firmware | ||
| Intel NUC 6i5SYK BIOS | ||
| Intel NUC Kit NUC6i3SYK | ||
| Intel NUC 6i5SYK BIOS | ||
| Intel NUC 6i5SYK BIOS | ||
| Intel R1304SPOSHOR | ||
| Intel Server System R1304SPOSHOR | ||
| Intel R1304SPOSHORR | ||
| Intel Server System R1304SPOSHORR | ||
| Intel R1208SPOSHORR | ||
| Intel R1208SPOSHORR BIOS | ||
| Intel lr1304spcfg1r | ||
| Intel Server System LR1304SPCFG1R | ||
| Intel R1208SPOSHORR | ||
| Intel R1208SPOSHOR BIOS | ||
| Intel S1200SPSR | ||
| Intel Server Board S1200SPSR | ||
| Intel S1200SPOR | ||
| Intel Server Board S1200SPOR | ||
| Intel LR1304SPCFGR1 BIOS | ||
| Intel lr1304spcfg1r | ||
| Intel S1200SPL | ||
| Intel S1200SPL BIOS | ||
| Intel S1200SP | ||
| Intel S1200SP0 BIOS | ||
| Intel S1200SPS | ||
| Intel Server Board S1200SPS | ||
| Intel R1304SPOSHBNR BIOS | ||
| Intel Server System R1304SPOSHB | ||
| Intel S1200SPLR | ||
| Intel Server Board S1200SPLR | ||
| Intel R1304SPOSHBNR BIOS | ||
| Intel Server System R1304SPOSHBnR |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-5691?
CVE-2017-5691 is classified as a medium severity vulnerability affecting certain Intel processors.
How do I fix CVE-2017-5691?
To mitigate CVE-2017-5691, you should update the affected system firmware to the latest version provided by Intel.
Which Intel processor families are affected by CVE-2017-5691?
CVE-2017-5691 affects the 6th and 7th Generation Intel Core Processor Families as well as certain Intel Xeon E3 product families.
What is the impact of CVE-2017-5691?
The impact of CVE-2017-5691 includes the potential compromise of SGX security due to incorrect early system state checks.
Is CVE-2017-5691 specific to certain BIOS versions?
Yes, CVE-2017-5691 specifically affects systems with certain BIOS versions associated with the vulnerable Intel processors.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/author
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel nuc mini pc nuc7i3bnk
- canonical/intel nuc kit nuc7i3bnk
- canonical/intel nuc 7i5bnk bios
- canonical/intel nuc 7i5-bnk
- canonical/intel nuc 7i7bnh bios
- canonical/intel nuc nuc7i7bnh
- canonical/intel stk2m3w64cc bios
- canonical/intel compute stick stk2mv64cc
- canonical/intel compute stick stk2m3w64cc firmware
- canonical/intel nuc 6i7kyk bios
- canonical/intel nuc6i7kyk firmware
- canonical/intel nuc 6i5syk bios
- canonical/intel nuc kit nuc6i3syk
- canonical/intel r1304sposhor
- canonical/intel server system r1304sposhor
- canonical/intel r1304sposhorr
- canonical/intel server system r1304sposhorr
- canonical/intel r1208sposhorr
- canonical/intel r1208sposhorr bios
- canonical/intel lr1304spcfg1r
- canonical/intel server system lr1304spcfg1r
- canonical/intel r1208sposhor bios
- canonical/intel s1200spsr
- canonical/intel server board s1200spsr
- canonical/intel s1200spor
- canonical/intel server board s1200spor
- canonical/intel lr1304spcfgr1 bios
- canonical/intel s1200spl
- canonical/intel s1200spl bios
- canonical/intel s1200sp
- canonical/intel s1200sp0 bios
- canonical/intel s1200sps
- canonical/intel server board s1200sps
- canonical/intel r1304sposhbnr bios
- canonical/intel server system r1304sposhb
- canonical/intel s1200splr
- canonical/intel server board s1200splr
- canonical/intel server system r1304sposhbnr