CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2017-5689
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Severity
- EPSS
- 92% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-01-28, due 2022-07-28
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hpe:proliant_ml10_gen9_server_firmware
- intel:active_management_technology_firmware
- siemens:simatic_field_pg_m3_firmware
- siemens:simatic_field_pg_m4_firmware
- siemens:simatic_field_pg_m5_firmware
- siemens:simatic_ipc427d_firmware
- siemens:simatic_ipc427e_firmware
- siemens:simatic_ipc477d_firmware
- siemens:simatic_ipc477e_firmware
- siemens:simatic_ipc547d_firmware
- siemens:simatic_ipc547e_firmware
- siemens:simatic_ipc547g_firmware
- siemens:simatic_ipc627c_firmware
- siemens:simatic_ipc627d_firmware
- siemens:simatic_ipc647c_firmware
- siemens:simatic_ipc647d_firmware
- siemens:simatic_ipc677c_firmware
- siemens:simatic_ipc677d_firmware
- siemens:simatic_ipc827c_firmware
- siemens:simatic_ipc827d_firmware
- siemens:simatic_ipc847c_firmware
- siemens:simatic_ipc847d_firmware
- siemens:simatic_itp1000_firmware
- siemens:simatic_pcs_7_ipc427e_firmware
- siemens:simatic_pcs_7_ipc477d_firmware
- siemens:simatic_pcs_7_ipc547d_firmware
- siemens:simatic_pcs_7_ipc547e_firmware
- siemens:simatic_pcs_7_ipc547g_firmware
- siemens:simatic_pcs_7_ipc627c_firmware
- siemens:simatic_pcs_7_ipc647c_firmware
- siemens:simatic_pcs_7_ipc647d_firmware
- siemens:simatic_pcs_7_ipc677c_firmware
- siemens:simatic_pcs_7_ipc847c_firmware
- siemens:simatic_pcs_7_ipc847d_firmware
- siemens:simotion_p320-4_s_firmware
- siemens:sinumerik_pcu50.5-p_firmware
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.securityfocus.com/bid/98269
- http://www.securitytracker.com/id/1038385
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf