What’s Vulnerable › Vulnerabilities
CVE-2017-5712
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-11-21 · updated 2026-06-17
- Weakness: CWE-119
Description
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
Affected products
- ASUS B150-A Firmware: all versions
- ASUS B150-Plus Firmware: all versions
- ASUS B150-Pro D3 Firmware: all versions
- ASUS B150-Pro Firmware: all versions
- ASUS B150 Pro Gaming/Aura Firmware: all versions
- ASUS B150 Pro Gaming D3 Firmware: all versions
- ASUS B150 Pro Gaming Firmware: all versions
- ASUS B150I Pro Gaming/Aura Firmware: all versions
- ASUS B150I Pro Gaming/Wifi/Aura Firmware: all versions
- ASUS B150M-A/M.2 Firmware: all versions
- ASUS B150M-A D3 Firmware: all versions
- ASUS B150M-A Firmware: all versions
- ASUS B150M-C/Br Firmware: all versions
- ASUS B150M-C D3 Firmware: all versions
- ASUS B150M-C Firmware: all versions
- ASUS B150M-D Firmware: all versions
- ASUS B150M-F Plus Firmware: all versions
- ASUS B150M-K D3 Firmware: all versions
- ASUS B150M-K Firmware: all versions
- ASUS B150M-Plus D3 Firmware: all versions
- ASUS B150M-Plus Firmware: all versions
- ASUS B150M-V Plus Firmware: all versions
- ASUS B150M Pro Gaming Firmware: all versions
- ASUS B250-Mr Firmware: all versions
- ASUS B250-S Firmware: all versions
- ASUS B250 Mining Expert Firmware: all versions
- ASUS B250M-C Pro Firmware: all versions
- ASUS B250M-F Plus Firmware: all versions
- ASUS Ex-B150-V7 Firmware: all versions
- ASUS Ex-B150M-V3 Firmware: all versions
References
- http://www.securityfocus.com/bid/101920
- http://www.securitytracker.com/id/1039852
- https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
- https://security.netapp.com/advisory/ntap-20171120-0001/
- https://www.asus.com/News/wzeltG5CjYaIwGJ0
- http://www.securityfocus.com/bid/101920
- http://www.securitytracker.com/id/1039852
- https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
- https://security.netapp.com/advisory/ntap-20171120-0001/
- https://www.asus.com/News/wzeltG5CjYaIwGJ0
Get alerted when CVE-2017-5712 or the next vulnerability affects your stack