Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-5689
HistoryMay 02, 2017 - 2:59 p.m.

CVE-2017-5689

2017-05-0214:59:00
[email protected]
web.nvd.nist.gov
1000
In Wild
11
cve-2017-5689
intel
active management technology
amt
standard manageability
ism
small business technology
sbt
security vulnerability
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Affected configurations

NVD
Node
intelactive_management_technology_firmwareMatch6.0
OR
intelactive_management_technology_firmwareMatch6.1
OR
intelactive_management_technology_firmwareMatch6.2
OR
intelactive_management_technology_firmwareMatch7.0
OR
intelactive_management_technology_firmwareMatch7.1
OR
intelactive_management_technology_firmwareMatch8.0
OR
intelactive_management_technology_firmwareMatch8.1
OR
intelactive_management_technology_firmwareMatch9.0
OR
intelactive_management_technology_firmwareMatch9.1
OR
intelactive_management_technology_firmwareMatch9.5
OR
intelactive_management_technology_firmwareMatch10.0
OR
intelactive_management_technology_firmwareMatch11.0
OR
intelactive_management_technology_firmwareMatch11.5
OR
intelactive_management_technology_firmwareMatch11.6
CPENameOperatorVersion
intel:active_management_technology_firmwareintel active management technology firmwareeq6.0
intel:active_management_technology_firmwareintel active management technology firmwareeq6.1
intel:active_management_technology_firmwareintel active management technology firmwareeq6.2
intel:active_management_technology_firmwareintel active management technology firmwareeq7.0
intel:active_management_technology_firmwareintel active management technology firmwareeq7.1
intel:active_management_technology_firmwareintel active management technology firmwareeq8.0
intel:active_management_technology_firmwareintel active management technology firmwareeq8.1
intel:active_management_technology_firmwareintel active management technology firmwareeq9.0
intel:active_management_technology_firmwareintel active management technology firmwareeq9.1
intel:active_management_technology_firmwareintel active management technology firmwareeq9.5
Rows per page:
1-10 of 141

CNA Affected

[
  {
    "product": "Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later"
      }
    ]
  }
]

Social References

More

Related

rapid7community 2
lenovo 2
threatpost 4
checkpoint_advisories 1
cvelist 2
nvd 2
openvas 2
cisco 1
zdt 1
metasploit 1
cisa_kev 1
nuclei 1
f5 1
intel 2
prion 2
hp 1
thn 2
cert 1
ics 2
exploitpack 1
attackerkb 2
myhack58 1
nessus 1
huawei 1
exploitdb 1
kitploit 1
cve 1
nmap 1
cisa 1
trendmicroblog 1
qualysblog 1
oracle 1
rapid7community
rapid7community
On the lookout for Intel AMT CVE-2017-5689
2017-05-12 22:43:51
Metasploit Wrapup
2017-05-26 19:06:43
lenovo
lenovo
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - us
2018-02-21 11:00:00
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - Lenovo Support US
2018-02-21 11:00:00
threatpost
threatpost
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
2017-08-30 17:43:31
Researcher: 'Baseless Assumptions' Exist About Intel AMT Vulnerability
2017-05-03 15:39:07
Researchers Disclose Intel AMT Flaw Research
2017-05-05 18:17:57
checkpoint_advisories
checkpoint_advisories
Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)
2017-05-09 00:00:00
cvelist
cvelist
CVE-2017-5689
2017-05-02 14:00:00
CVE-2017-5698
2017-09-28 00:00:00
nvd
nvd
CVE-2017-5689
2017-05-02 14:59:00
CVE-2017-5698
2017-09-05 19:29:00
openvas
openvas
Intel Active Management Technology Privilege Escalation Vulnerability
2017-05-05 00:00:00
Intel Standard Manageability Privilege Escalation Vulnerability
2017-05-05 00:00:00
cisco
cisco
Intel Active Management Technology Privilege Escalation Vulnerability
2017-05-12 18:30:00
zdt
zdt
Intel AMT Digest Authentication Bypass Scanner Exploit
2017-06-05 00:00:00
metasploit
metasploit
Intel AMT Digest Authentication Bypass Scanner
2017-05-08 18:24:00
cisa_kev
cisa_kev
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
2022-01-28 00:00:00
nuclei
nuclei
Intel Active Management - Authentication Bypass
2022-10-13 23:18:57
f5
f5
K94700053 : Intel AMT vulnerability CVE-2017-5689
2017-05-03 00:00:00
intel
intel
Intel AMT® Upgradable to Vulnerable Firmware
2017-09-05 00:00:00
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege
2020-03-17 00:00:00
prion
prion
Design/Logic Flaw
2017-05-02 14:59:00
Code injection
2017-09-05 19:29:00
hp
hp
HPSBHF03557 rev. 1 - Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation
2017-05-04 00:00:00
thn
thn
Explained — How Intel AMT Vulnerability Allows to Hack Computers Remotely
2017-05-05 08:04:00
PCs with Intel Server Chipsets, Launched Since 2010, Can be Hacked Remotely
2017-05-01 21:24:00
cert
cert
Intel Active Management Technology (AMT) does not properly enforce access control
2017-05-02 00:00:00
ics
ics
Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320
2017-06-29 00:00:00
Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)
2017-07-11 12:00:00
exploitpack
exploitpack
Intel Active Management Technology - System Privileges
2017-05-10 00:00:00
attackerkb
attackerkb
CVE-2017-5689
2017-05-02 00:00:00
CVE-2017-5698
2017-09-05 00:00:00
myhack58
myhack58
Intel AMT features to remotely provide the right high-risk vulnerability analysis-vulnerability warning-the black bar safety net
2017-05-08 00:00:00
nessus
nessus
Intel Management Engine Insecure Read / Write Operations RCE (INTEL-SA-00075) (remote check)
2017-05-03 00:00:00
huawei
huawei
Security Advisory - Escalation of Privilege Vulnerability in Intel AMT, Intel ISM and Intel SMT
2017-07-12 00:00:00
exploitdb
exploitdb
Intel Active Management Technology - System Privileges
2017-05-10 00:00:00
kitploit
kitploit
Shodan Dorks
2024-03-18 11:30:00
cve
cve
CVE-2017-5698
2017-09-28 00:00:00
nmap
nmap
http-vuln-cve2017-5689 NSE Script
2017-05-07 01:33:57
cisa
cisa
CISA Adds Eight Known Exploited Vulnerabilities to Catalog
2022-01-28 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 8, 2017
2017-05-12 16:47:57
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2017-5689
rapid7community2lenovo2threatpost4checkpoint_advisories1cvelist2nvd2openvas2cisco1zdt1metasploit1cisa_kev1nuclei1f51intel2prion2hp1thn2cert1ics2exploitpack1attackerkb2myhack581nessus1huawei1exploitdb1kitploit1cve1nmap1cisa1trendmicroblog1qualysblog1oracle1