← CVE Radar
CVE-2017-5689Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
9.8 CRITICALEPSS 92.18%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jul 28, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2017-5689
- Status
- Analyzed
- Assigner (CNA)
- intel
- Published
- May 2, 2017
- Last modified
- 2026-06-17 01:21 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
Intel CorporationIntel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability1 version range
- fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later
References
- oracle.com http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- securityfocus.com http://www.securityfocus.com/bid/98269
- securitytracker.com http://www.securitytracker.com/id/1038385
- cert-portal.siemens.com https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
- downloadmirror.intel.com https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
- h20566.www2.hpe.com https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
- security-center.intel.com https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
- security.netapp.com https://security.netapp.com/advisory/ntap-20170509-0001/
- embedi.com https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
- embedi.com https://www.embedi.com/news/mythbusters-cve-2017-5689
- tenable.com https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689