[ CVE-2017-5689 · Published 2 May 2017 ]
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 9.8
EPSS 92%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-01-28
- EPSS: 92% chance of exploitation in the next 30 days (higher than 100% of CVEs)
- Critical severity: CVSS 9.8
[ Description ]Official description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CISA: Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 28 Jul 2022): Apply updates per vendor instructions.
- Patch on oracle.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
- Patch on security-center.intel.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatchThird Party Advisory
- www.securityfocus.com/bid/98269Broken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038385Broken LinkThird Party AdvisoryVDB Entry
- cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- h20566.www2.hpe.com/hpsc/doc/public/displayThird Party Advisory
- security-center.intel.com/advisory.aspxPatchVendor Advisory
- security.netapp.com/advisory/ntap-20170509-0001Third Party Advisory
- www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken LinkExploitTechnical Description
- www.embedi.com/news/mythbusters-cve-2017-5689Broken LinkThird Party Advisory
- www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical DescriptionThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource