ASUS Rog Strix z370-H Gaming Firmware vulnerabilities

2 CVEs affecting ASUS Rog Strix z370-H Gaming Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-5712, published 2017-11-21.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5712, published 2017-11-21. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to…
• CVE-2017-5711, published 2017-11-21. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to…