Critical severity · published May 2, 2017
CVE-2017-5689
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
In wildKEV
9.8
CVSS
92.2%
EPSS
Yes
On KEV
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)92.2% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 28, 2022
Federal remediation dueJul 28, 2022
Ransomware campaign useNot known
Affected products
Which versions
IA
Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability · Intel Corporation
fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later · source: vendor
AM
Active Management Technology Firmware · Intel
6.0; 6.1; 6.2; 7.0; 7.1; 8.0; +8 more · source: NVD
PM
Proliant Ml10 Gen9 Server Firmware · Hpe
5.0 · source: NVD
SF
Simatic Field PG M3 Firmware · Siemens
before 6.2.61.3535 · source: NVD
SF
Simatic Field PG M4 Firmware · Siemens
before 18.01.06 · source: NVD
SF
Simatic Field PG M5 Firmware · Siemens
before 22.01.03 · source: NVD
SI
Simatic Ipc427d Firmware · Siemens
All versions, or not specified · source: NVD
SI
Simatic Ipc427e Firmware · Siemens
before 21.01.05 · source: NVD
SI
Simatic Ipc477d Firmware · Siemens
All versions, or not specified · source: NVD
SI
Simatic Ipc477e Firmware · Siemens
before 21.01.05 · source: NVD
SI
Simatic Ipc547d Firmware · Siemens
before 7.1.91.3272 · source: NVD
SI
Simatic Ipc547e Firmware · Siemens
before 9.1.41.3024 · source: NVD
Affected product
IA
Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
Intel Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-5689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-5689
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
x_refsource_CONFIRM
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
vdb-entry
http://www.securityfocus.com/bid/98269
vdb-entry
http://www.securitytracker.com/id/1038385
x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20170509-0001/
x_refsource_MISC
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
