Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-5698
HistorySep 05, 2017 - 7:29 p.m.

CVE-2017-5698

2017-09-0519:29:00
[email protected]
web.nvd.nist.gov

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

6.9 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges.

Affected configurations

NVD
Node
intelactive_management_technology_firmwareMatch11.0.25.3001
OR
intelactive_management_technology_firmwareMatch11.0.26.3000
OR
intelmanageability_engine_firmwareMatch11.0.25.3001
OR
intelmanageability_engine_firmwareMatch11.0.26.3000
OR
intelsmall_business_technology_firmwareMatch11.0.25.3001
OR
intelsmall_business_technology_firmwareMatch11.0.26.3000

Related

cvelist 2
cve 2
attackerkb 2
prion 2
openvas 4
rapid7community 2
lenovo 2
threatpost 4
checkpoint_advisories 1
nvd 1
cisco 1
zdt 1
ics 2
exploitpack 1
huawei 1
thn 2
nessus 1
myhack58 1
cisa_kev 1
nuclei 1
metasploit 1
f5 1
intel 2
cert 1
hp 1
exploitdb 1
kitploit 1
nmap 1
cisa 1
trendmicroblog 1
qualysblog 1
oracle 1
cvelist
cvelist
CVE-2017-5698
2017-09-28 00:00:00
CVE-2017-5689
2017-05-02 14:00:00
cve
cve
CVE-2017-5698
2017-09-28 00:00:00
CVE-2017-5689
2017-05-02 14:59:00
attackerkb
attackerkb
CVE-2017-5698
2017-09-05 00:00:00
CVE-2017-5689
2017-05-02 00:00:00
prion
prion
Code injection
2017-09-05 19:29:00
Design/Logic Flaw
2017-05-02 14:59:00
openvas
openvas
Intel Active Management Technology Privilege Escalation Vulnerability
2017-09-12 00:00:00
Intel Standard Manageability Privilege Escalation Vulnerability
2017-09-12 00:00:00
Intel Active Management Technology Privilege Escalation Vulnerability
2017-05-05 00:00:00
rapid7community
rapid7community
On the lookout for Intel AMT CVE-2017-5689
2017-05-12 22:43:51
Metasploit Wrapup
2017-05-26 19:06:43
lenovo
lenovo
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - us
2018-02-21 11:00:00
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - Lenovo Support US
2018-02-21 11:00:00
threatpost
threatpost
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
2017-08-30 17:43:31
Researcher: 'Baseless Assumptions' Exist About Intel AMT Vulnerability
2017-05-03 15:39:07
Researchers Disclose Intel AMT Flaw Research
2017-05-05 18:17:57
checkpoint_advisories
checkpoint_advisories
Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)
2017-05-09 00:00:00
nvd
nvd
CVE-2017-5689
2017-05-02 14:59:00
cisco
cisco
Intel Active Management Technology Privilege Escalation Vulnerability
2017-05-12 18:30:00
zdt
zdt
Intel AMT Digest Authentication Bypass Scanner Exploit
2017-06-05 00:00:00
ics
ics
Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320
2017-06-29 00:00:00
Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)
2017-07-11 12:00:00
exploitpack
exploitpack
Intel Active Management Technology - System Privileges
2017-05-10 00:00:00
huawei
huawei
Security Advisory - Escalation of Privilege Vulnerability in Intel AMT, Intel ISM and Intel SMT
2017-07-12 00:00:00
thn
thn
PCs with Intel Server Chipsets, Launched Since 2010, Can be Hacked Remotely
2017-05-01 21:24:00
Explained — How Intel AMT Vulnerability Allows to Hack Computers Remotely
2017-05-05 08:04:00
nessus
nessus
Intel Management Engine Insecure Read / Write Operations RCE (INTEL-SA-00075) (remote check)
2017-05-03 00:00:00
myhack58
myhack58
Intel AMT features to remotely provide the right high-risk vulnerability analysis-vulnerability warning-the black bar safety net
2017-05-08 00:00:00
cisa_kev
cisa_kev
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
2022-01-28 00:00:00
nuclei
nuclei
Intel Active Management - Authentication Bypass
2022-10-13 23:18:57
metasploit
metasploit
Intel AMT Digest Authentication Bypass Scanner
2017-05-08 18:24:00
f5
f5
K94700053 : Intel AMT vulnerability CVE-2017-5689
2017-05-03 00:00:00
intel
intel
Intel AMT® Upgradable to Vulnerable Firmware
2017-09-05 00:00:00
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege
2020-03-17 00:00:00
cert
cert
Intel Active Management Technology (AMT) does not properly enforce access control
2017-05-02 00:00:00
hp
hp
HPSBHF03557 rev. 1 - Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation
2017-05-04 00:00:00
exploitdb
exploitdb
Intel Active Management Technology - System Privileges
2017-05-10 00:00:00
kitploit
kitploit
Shodan Dorks
2024-03-18 11:30:00
nmap
nmap
http-vuln-cve2017-5689 NSE Script
2017-05-07 01:33:57
cisa
cisa
CISA Adds Eight Known Exploited Vulnerabilities to Catalog
2022-01-28 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 8, 2017
2017-05-12 16:47:57
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

6.9 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON
Related for NVD:CVE-2017-5698
cvelist2cve2attackerkb2prion2openvas4rapid7community2lenovo2threatpost4checkpoint_advisories1nvd1cisco1zdt1ics2exploitpack1huawei1thn2nessus1myhack581cisa_kev1nuclei1metasploit1f51intel2cert1hp1exploitdb1kitploit1nmap1cisa1trendmicroblog1qualysblog1oracle1