CVE-2017-5721 PoC — 多款Intel产品安全漏洞

Source

Associated Vulnerability

Title: 多款Intel产品安全漏洞 (CVE-2017-5721)
Description:Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

Description

CVE-2017-5721 Proof-of-Concept

Readme

# UsbRt SMM Privilege Elevation

This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. 

All you need is [CHIPSEC Framework](https://github.com/chipsec/chipsec) installed. And don't forget to put `GRUB_CMDLINE_LINUX_DEFAULT="quiet splash acpi=off"` in `/etc/default/grub` if you have Intel device.  

Usage example:  
```
sudo python poc.py
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →