CVE-2017-5689 is a vulnerability in Intel Active Management Technology Firmware
Published on May 2, 2017
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Known Exploited Vulnerability
This Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageabilit vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
The following remediation steps are recommended / required by July 28, 2022: Apply updates per vendor instructions.
Vulnerability Analysis
CVE-2017-5689 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. This vulnerability is known to be actively exploited by threat actors in an automatable fashion. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2017-5689
Want to know whenever a new CVE is published for Intel Active Management Technology Firmware? stack.watch will email you.
Affected Versions
Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability Version fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later is affected by CVE-2017-5689Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.