CVE-2017-5691
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families,...
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
- Record
CVE-2017-5691- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
- Record
CVE-2017-5691- Updated
- 2026-11-02
EUVDEUVD-2017-14768 No score
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
- Record
EUVD-2017-14768- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-673v-gfv2-969w
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families,...
Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state.
- Record
GHSA-673v-gfv2-969w- CVSS 3.0
- 9.0 Critical
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- intel lr1304spcfg1 bios
- intel lr1304spcfg1r bios
- intel nuc6i3syk bios
- intel nuc6i5syk bios
- intel nuc6i7kyk bios
- intel nuc7i3bnk bios
- intel nuc7i5bnk bios
- intel nuc7i7bnh bios
- intel r1208sposhor bios
- intel r1208sposhorr bios
- intel r1304sposhbn bios
- intel r1304sposhbnr bios
Show 11 moreShow less
- intel r1304sposhor bios
- intel r1304sposhorr bios
- intel s1200spl bios
- intel s1200splr bios
- intel s1200spo bios
- intel s1200spor bios
- intel s1200sps bios
- intel s1200spsr bios
- intel stk2m3w64cc bios
- intel stk2mv64cc bios
- intel corporation 6th and 7th generation intel core processor families, intel xeon e3-1500m v5 and v6 processor families, and intel xeon e3-1200 v5 and v6 product families.
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5691 is a critical vulnerability (CVSS 9.0) in Intel Lr1304spcfg1 Bios, published July 26, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.