CVE-2017-5691 Security feature bypass in 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families.
Compromised system firmware can bypass Intel SGX security protections due to incorrect early system state checks in specific Intel processors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-5691?
CVE-2017-5691 is a critical vulnerability in 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Processor Families, and Intel Xeon E3-1200 v5 and v6 Product Families., published on 26 Jul 2017. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
Which versions are affected by CVE-2017-5691?
It affects 22 products.
Products include Intel Lr1304spcfg1 Bios, Intel Lr1304spcfg1r Bios, Intel Nuc6i3syk Bios, Intel Nuc6i5syk Bios, Intel Nuc6i7kyk Bios, Intel Nuc7i3bnk Bios and 16 more.
How do I fix CVE-2017-5691?
No fix has been published for CVE-2017-5691 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5691 being exploited?
There is no known exploitation of CVE-2017-5691 in the wild and no public exploit code.
Sources
Also known as GHSA-673v-gfv2-969w.