CVE-2017-5705
highPriorität · verfolgen · 31OT-Risiko · erhöhtEPSS 0.007 · 52. PerzentilEURUUSEPSS · bewertet 2026-10-27
Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIMATIC Field-PG M3cisa_csaf_ot
SIMOTION P320-4S: Update to S17.02.06.83.1 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109756438 - BehobenSIMATIC Field-PG M4cisa_csaf_ot
SIMATIC Field-PG M4: Update to V18.01.06 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037537 - BehobenSIMATIC Field-PG M5cisa_csaf_ot
SIMATIC Field-PG M5: Update to V22.01.04 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109738122 - BehobenSIMATIC HMI IPC677Ccisa_csaf_ot
SIMATIC HMI IPC677C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - BehobenSIMATIC IPC427Dcisa_csaf_ot
SIMATIC IPC427D: Update to V17.0?.10 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500 - BehobenSIMATIC IPC427Ecisa_csaf_ot
SIMATIC IPC427E: Update to V21.01.07 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/109742593 - BehobenSIMATIC IPC477Dcisa_csaf_ot
SIMATIC IPC477D: Update to V17.0?.10 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500 - BehobenSIMATIC IPC477D PROcisa_csaf_ot
SIMATIC IPC477D PRO: Update to V17.0?.10 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500 - BehobenSIMATIC IPC477Ecisa_csaf_ot
SIMATIC IPC477E: Update to V21.01.07 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109742593 - BehobenSIMATIC IPC547Dcisa_csaf_ot
SIMATIC IPC547D: Update to V7.1.91.3272 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/67329515 - BehobenSIMATIC IPC547Ecisa_csaf_ot
SIMATIC IPC547E: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109481624 - BehobenSIMATIC IPC547Gcisa_csaf_ot
SIMATIC IPC547G: Update to V11.8.50.3425 and R1.21.0 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109750349 - BehobenSIMATIC IPC627Ccisa_csaf_ot
SIMATIC IPC627C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - BehobenSIMATIC IPC627Dcisa_csaf_ot
SIMATIC IPC627D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954 - BehobenSIMATIC IPC647Ccisa_csaf_ot
SIMATIC IPC647C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792076 - BehobenSIMATIC IPC647Dcisa_csaf_ot
SIMATIC IPC647D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037779 - BehobenSIMATIC IPC677Dcisa_csaf_ot
SIMATIC IPC677D: Install V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954 - BehobenSIMATIC IPC827Ccisa_csaf_ot
SIMATIC IPC827C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - BehobenSIMATIC IPC827Dcisa_csaf_ot
SIMATIC IPC827D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954 - BehobenSIMATIC IPC847Ccisa_csaf_ot
SIMATIC IPC847C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792076 - BehobenSIMATIC IPC847Dcisa_csaf_ot
SIMATIC IPC847D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037779 - BehobenSIMATIC ITP1000cisa_csaf_ot
SIMATIC ITP1000: Update to V23.01.03 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109748173 - BehobenSINUMERIK PCU50.5-C WIN7cisa_csaf_ot
SINUMERIK PCU50.5-C, WIN7: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087%20 - BehobenSINUMERIK PCU50.5-C WINXPcisa_csaf_ot
SINUMERIK PCU50.5-C, WINXP: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - BehobenSINUMERIK PCU50.5-P WIN7cisa_csaf_ot
SINUMERIK PCU50.5-P, WIN7: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - BehobenSINUMERIK PCU50.5-P WINXPcisa_csaf_ot
SINUMERIK PCU50.5-P, WINXP: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087 - MitigationSIMATIC Field-PG M3cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC Field-PG M4cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC Field-PG M5cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC HMI IPC677Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC427Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC427Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC477Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC477D PROcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC477Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC547Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC547Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC547Gcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC627Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC627Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC647Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC647Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC677Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC827Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC827Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC847Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC IPC847Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMATIC ITP1000cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSIMOTION P320-4Scisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSINUMERIK PCU50.5-C WIN7cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSINUMERIK PCU50.5-C WINXPcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSINUMERIK PCU50.5-P WIN7cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security - MitigationSINUMERIK PCU50.5-P WINXPcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (15)
Betroffene Produkte und Versionsbereiche.
- intel manageability engine firmware= 11.0nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- intel manageability engine firmware= 11.10nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- intel manageability engine firmware= 11.20nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- intel manageability engine firmware= 11.5nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- intel manageability engine firmware= 11.6nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
- intel manageability engine firmware= 11.7nvdUScpe:2.3:o:intel:manageability_engine_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-18-060-01ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)2018-03-01icsa · cisa_csaf_otUS
Siemens ProductCERT reported the vulnerabilities to NCCIC.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (18)
Externe Belege — Patches, Meldungen, Analysen.
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-frcnnvd
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-frPatchcnnvd
- http://www.securityfocus.com/bid/101917enisa_euvd
- http://www.securitytracker.com/id/1039852enisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdfenisa_euvd
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-frenisa_euvd
- https://security.netapp.com/advisory/ntap-20171120-0001/enisa_euvd
- https://twitter.com/PTsecurity_UK/status/938447926128291842enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan