CVE Vulnerabilities

CVE-2017-5703

Improper Privilege Management

Published: Apr 03, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Core_i7-8550u Intel - (including) - (including)
Core_i7-8559u Intel - (including) - (including)
Core_i7-8650u Intel - (including) - (including)
Core_i7-8700 Intel - (including) - (including)
Core_i7-8700b Intel - (including) - (including)
Core_i7-8700k Intel - (including) - (including)
Core_i7-8700t Intel - (including) - (including)
Core_i7-8705g Intel - (including) - (including)
Core_i7-8706g Intel - (including) - (including)
Core_i7-8709g Intel - (including) - (including)
Core_i7-8750h Intel - (including) - (including)
Core_i7-8809g Intel - (including) - (including)
Core_i7-8850h Intel - (including) - (including)

Potential Mitigations

References