安全ID : NAS-201711-29

Security Advisory for Intel ME, SPS, TXE

发布日期 : November 29, 2017
通用漏洞披露 : CVE-2017-5705 | CVE-2017-5706 | CVE-2017-5707 | CVE-2017-5708 | CVE-2017-5709 | CVE-2017-5710 | CVE-2017-5711 | CVE-2017-5712
受影响产品: None

严重程度

Moderate

状态

已解决

Summary

Multiple vulnerabilities were recently found in Intel Management Engine (ME), Server Platform Service (SPS), and Trusted Execution Engine (TXE). If exploited, these vulnerabilities may allow local attackers to execute arbitrary codes on the system.

As of posting, QNAP has verified that none of our NAS products are affected. Intel is still releasing more information about this issue. We will update this advisory once we gain more information from Intel.

修订历史:
V1.1 (December 14, 2017) - Updated affected products and summary
V1.0 (November 29, 2017) - Published