The vulnerability of the web-server module that implements Intel Active Management Technology, a remote control technology for computers, allows attackers to gain access to the device.

🗓️ 18 Aug 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in Intel Active Management web server allows remote access via authentication flaws.

Reporter	Title	Published	Views	Family All 64
0day.today	Intel AMT Digest Authentication Bypass Scanner Exploit	5 Jun 201700:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Hpe Proliant_Ml10_Gen9_Server_Firmware	4 May 201701:51	–	githubexploit
Tenable Nessus	Intel Active Management Technology 6.x < 6.2.61.3535 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 7.x < 7.1.91.3272 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 8.x < 8.1.71.3608 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.x < 9.1.41.3024 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.5.x < 9.5.61.3012 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 10.x < 10.0.55.3000 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.0.x < 11.0.25.3001 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.5.x / 11.6.x < 11.6.27.3264 RCE	3 May 201700:00	–	nessus

Vulners

Node

OR

intel active_management_technologyRange6.0–6.2.61.3535

intel active_management_technologyRange7.0–7.1.91.3272

intel active_management_technologyRange8.0–8.1.71.3608

intel active_management_technologyRange9.0–9.1.41.3024

intel active_management_technologyRange9.5–9.5.61.3012

intel active_management_technologyRange10.0–10.0.55.3000

intel active_management_technologyRange11.0–11.0.25.3001

intel active_management_technologyRange11.5–11.6.27.3264

Source	Link
securityfocus	www.securityfocus.com/bid/98269
downloadmirror	www.downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
security-center	www.security-center.intel.com/advisory.aspx
embedi	www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
embedi	www.embedi.com/news/mythbusters-cve-2017-5689
tenable	www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
intel	www.intel.com/content/www/us/en/support/boards-and-kits/000024179.html
intel	www.intel.com/content/www/us/en/support/boards-and-kits/000024180.html
intel	www.intel.com/content/www/us/en/support/boards-and-kits/000024181.html
siemens	www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-874235.pdf

24 Sep 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 39.8

CVSS 210

EPSS0.92189

intel active management web server authentication flaws remote access crafted requests