CVE-2017-5689
critical · 9.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-01-28Remediation due 2022-07-28
A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
9.8
CVSS
92.2%
EPSS (exploit prob.)
100th
EPSS percentile
2017-05-02
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hpe | proliant_ml10_gen9_server_firmware | 5.0 |
| hpe | proliant_ml10_gen9_server | all versions |
| siemens | simatic_itp1000_firmware | < 9.1.41.3024 |
| siemens | simatic_itp1000 | all versions |
| siemens | simatic_ipc847d_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc847d | all versions |
| siemens | simatic_ipc847c_firmware | < 6.2.61.3535 |
| siemens | simatic_ipc847c | all versions |
| siemens | simatic_ipc827d_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc827d | all versions |
| siemens | simatic_ipc827c_firmware | < 6.2.61.3535 |
| siemens | simatic_ipc827c | all versions |
| siemens | simatic_ipc677d_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc677d | all versions |
| siemens | simatic_ipc677c_firmware | < 6.2.61.3535 |
| siemens | simatic_ipc677c | all versions |
| siemens | simatic_ipc647d_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc647d | all versions |
| siemens | simatic_ipc647c_firmware | < 6.2.61.3535 |
| siemens | simatic_ipc647c | all versions |
| siemens | simatic_ipc627d_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc627d | all versions |
| siemens | simatic_ipc627c_firmware | < 6.2.61.3535 |
| siemens | simatic_ipc627c | all versions |
| siemens | simatic_ipc547g_firmware | < 11.0.26.3000 |
| siemens | simatic_ipc547g | all versions |
| siemens | simatic_ipc547e_firmware | < 9.1.41.3024 |
| siemens | simatic_ipc547e | all versions |
| siemens | simatic_ipc547d_firmware | < 7.1.91.3272 |
| siemens | simatic_ipc547d | all versions |
| siemens | simatic_ipc477e_firmware | < 21.01.05 |
| siemens | simatic_ipc477e | all versions |
| siemens | simatic_ipc477d_firmware | all versions |
| siemens | simatic_ipc477d_firmware | all versions |
| siemens | simatic_ipc477d | all versions |
| siemens | simatic_field_pg_m3_firmware | < 6.2.61.3535 |
| siemens | simatic_field_pg_m3 | all versions |
| siemens | simatic_field_pg_m4_firmware | < 18.01.06 |
| siemens | simatic_field_pg_m4 | all versions |
| siemens | simatic_field_pg_m5_firmware | < 22.01.03 |
Check a specific version with /api/v1/cve/match.
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.securityfocus.com/bid/98269
- http://www.securitytracker.com/id/1038385
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
- https://security.netapp.com/advisory/ntap-20170509-0001/
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
- https://www.embedi.com/news/mythbusters-cve-2017-5689
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.securityfocus.com/bid/98269
- http://www.securitytracker.com/id/1038385
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
- https://security.netapp.com/advisory/ntap-20170509-0001/
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
- https://www.embedi.com/news/mythbusters-cve-2017-5689
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-5689