VULNERABILITY INTELLIGENCE
CVE-2017-5704
CVSS score6.7 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2018-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Intel Core Processor potentially exposes password information in memory to a local attacker with administrative privileges.
Weakness classification
- CWE-522: Insufficiently Protected Credentials
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory