CVE-2017-5689
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 28 July 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 92.19% probability · 100th percentile
- Public exploits
- 1 in Exploit-DB · first 10 May 2017
- CISA KEV
- Listed 28 January 2022 · due 28 July 2022
- Weakness
- CWE-269
- Affected
- hpe/proliant ml10 gen9 server firmware · siemens/simatic itp1000 firmware · siemens/simatic ipc847d firmware · siemens/simatic ipc847c firmware · siemens/simatic ipc827d firmware · siemens/simatic ipc827c firmware · siemens/simatic ipc677d firmware · siemens/simatic ipc677c firmware · siemens/simatic ipc647d firmware · siemens/simatic ipc647c firmware · siemens/simatic ipc627d firmware · siemens/simatic ipc627c firmware · siemens/simatic ipc547g firmware · siemens/simatic ipc547e firmware · siemens/simatic ipc547d firmware · siemens/simatic ipc477e firmware · siemens/simatic ipc477d firmware · siemens/simatic field pg m3 firmware · siemens/simatic field pg m4 firmware · siemens/simatic field pg m5 firmware · +16 more
- Source
- secure@intel.com
EPSS 92.2% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
CISA notes
Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-5689
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/98269Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038385Broken Link, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usThird Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frPatch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20170509-0001/Third Party Advisory
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
- https://www.embedi.com/news/mythbusters-cve-2017-5689Broken Link, Third Party Advisory
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical Description, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/98269Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038385Broken Link, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usThird Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frPatch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20170509-0001/Third Party Advisory
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
- https://www.embedi.com/news/mythbusters-cve-2017-5689Broken Link, Third Party Advisory
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical Description, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.