CVE-2017-5689
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 28 July 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 92.19% probability · 100th percentile
- CISA KEV
- Listed 28 January 2022 · due 28 July 2022
- Weakness
- CWE-269
- Affected
- hpe/proliant ml10 gen9 server firmware · siemens/simatic itp1000 firmware · siemens/simatic ipc847d firmware · siemens/simatic ipc847c firmware · siemens/simatic ipc827d firmware · siemens/simatic ipc827c firmware · siemens/simatic ipc677d firmware · siemens/simatic ipc677c firmware · siemens/simatic ipc647d firmware · siemens/simatic ipc647c firmware · siemens/simatic ipc627d firmware · siemens/simatic ipc627c firmware · siemens/simatic ipc547g firmware · siemens/simatic ipc547e firmware · siemens/simatic ipc547d firmware · siemens/simatic ipc477e firmware · siemens/simatic ipc477d firmware · siemens/simatic field pg m3 firmware · siemens/simatic field pg m4 firmware · siemens/simatic field pg m5 firmware · +16 more
- Source
- secure@intel.com
CISA notes
Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-5689
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/98269Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038385Broken Link, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usThird Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frPatch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20170509-0001/Third Party Advisory
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
- https://www.embedi.com/news/mythbusters-cve-2017-5689Broken Link, Third Party Advisory
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical Description, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/98269Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038385Broken Link, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usThird Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frPatch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20170509-0001/Third Party Advisory
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
- https://www.embedi.com/news/mythbusters-cve-2017-5689Broken Link, Third Party Advisory
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical Description, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.