Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	101922
Class:	Design Error
CVE:	CVE-2017-5710
Remote:	No
Local:	Yes
Published:	Nov 20 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	The vendor reported this issue.
Vulnerable:	Intel Trusted Execution Engine 3.0
Not Vulnerable:	Intel Trusted Execution Engine 3.1.50.2222

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities

Intel Trusted Execution Engine is prone to multiple local privilege-escalation vulnerabilities.

A local attacker can exploit these issues to gain elevated privileges.

Intel Trusted Execution Engine version 3.0 is vulnerable; other versions may also be affected.

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Intel Trusted Execution Engine CVE-2017-5710 Multiple Local Privilege Escalation Vulnerabilities

References:

• Intel Home Page (Intel)
  
• INTEL-SA-00086: Intel Q3�??17 ME 11.x, SPS 4.0, and TXE 3.0 Security Review Cumul (Intel)