Log in Start free

Actively exploited · Published May 2, 2017 · Assigned by intel

CVE-2017-5689

Critical 9.8 Exploited

In plain English

A critical-severity privilege mismanagement in Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability from Intel Corporation. Attackers are actively exploiting it in the wild (listed by CISA on January 28, 2022). The chance it is exploited in the next 30 days is estimated at 92.2% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)92.2%top 0.2% of all CVEs
Exploited in the wildYesCISA KEV since Jan 28, 2022
Attack tooling3Metasploit, Nuclei, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Jul 28, 2022.

Official description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Affected products (as reported)

VendorProductVersions
Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References