CVE-2017-5689

🗓️ 02 May 2017 14:00:00Reported by intelType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 1222 Views🌐 WEB

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT)

Reporter	Title	Published	Views	Family All 63
0day.today	Intel AMT Digest Authentication Bypass Scanner Exploit	5 Jun 201700:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Hpe Proliant_Ml10_Gen9_Server_Firmware	4 May 201701:51	–	githubexploit
Tenable Nessus	Intel Active Management Technology 6.x < 6.2.61.3535 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 7.x < 7.1.91.3272 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 8.x < 8.1.71.3608 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.x < 9.1.41.3024 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.5.x < 9.5.61.3012 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 10.x < 10.0.55.3000 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.0.x < 11.0.25.3001 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.5.x / 11.6.x < 11.6.27.3264 RCE	3 May 201700:00	–	nessus

NVD

Node

hpe proliant_ml10_gen9_server_firmwareMatch5.0

AND

hpe proliant_ml10_gen9_serverMatch-

Node

siemens simatic_itp1000_firmwareRange<9.1.41.3024

AND

siemens simatic_itp1000Match-

Node

siemens simatic_ipc847d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc847dMatch-

Node

siemens simatic_ipc847c_firmwareRange<6.2.61.3535

AND

siemens simatic_ipc847cMatch-

Node

siemens simatic_ipc827d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc827dMatch-

Node

siemens simatic_ipc827c_firmwareRange<6.2.61.3535

AND

siemens simatic_ipc827cMatch-

Node

siemens simatic_ipc677d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc677dMatch-

Node

siemens simatic_ipc677c_firmwareRange<6.2.61.3535

AND

siemens simatic_ipc677cMatch-

Node

siemens simatic_ipc647d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc647dMatch-

Node

siemens simatic_ipc647c_firmwareRange<6.2.61.3535

AND

siemens simatic_ipc647cMatch-

Node

siemens simatic_ipc627d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc627dMatch-

Node

siemens simatic_ipc627c_firmwareRange<6.2.61.3535

AND

siemens simatic_ipc627cMatch-

Node

siemens simatic_ipc547g_firmwareRange<11.0.26.3000

AND

siemens simatic_ipc547gMatch-

Node

siemens simatic_ipc547e_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc547eMatch-

Node

siemens simatic_ipc547d_firmwareRange<7.1.91.3272

AND

siemens simatic_ipc547dMatch-

Node

siemens simatic_ipc477e_firmwareRange<21.01.05

AND

siemens simatic_ipc477eMatch-

Node

siemens simatic_ipc477d_firmwareMatch--

siemens simatic_ipc477d_firmwareMatch-pro

AND

siemens simatic_ipc477dMatch-

Node

siemens simatic_field_pg_m3_firmwareRange<6.2.61.3535

AND

siemens simatic_field_pg_m3Match-

Node

siemens simatic_field_pg_m4_firmwareRange<18.01.06

AND

siemens simatic_field_pg_m4Match-

Node

siemens simatic_field_pg_m5_firmwareRange<22.01.03

AND

siemens simatic_field_pg_m5Match-

Node

siemens simatic_ipc627d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc627dMatch-

Node

siemens simatic_ipc677d_firmwareRange<9.1.41.3024

AND

siemens simatic_ipc677dMatch-

Node

siemens simatic_pcs_7_ipc427e_firmwareRange<21.01.04

AND

siemens simatic_pcs_7_ipc427eMatch-

Node

siemens simatic_pcs_7_ipc547d_firmwareRange<7.1.91.3272

AND

siemens simatic_pcs_7_ipc547dMatch-

Node

siemens simatic_pcs_7_ipc547e_firmwareRange<9.1.41.3024

AND

siemens simatic_pcs_7_ipc547eMatch-

Node

siemens simatic_pcs_7_ipc547g_firmwareRange<11.0.26.3000

AND

siemens simatic_pcs_7_ipc547gMatch-

Node

siemens simatic_pcs_7_ipc627c_firmwareRange<6.2.61.3535

AND

siemens simatic_pcs_7_ipc627cMatch-

Node

siemens simatic_pcs_7_ipc677c_firmwareRange<6.2.61.3535

AND

siemens simatic_pcs_7_ipc677cMatch-

Node

siemens simatic_pcs_7_ipc647c_firmwareRange<6.2.61.3535

AND

siemens simatic_pcs_7_ipc647cMatch-

Node

siemens simatic_pcs_7_ipc647d_firmwareRange<9.1.41.3024

AND

siemens simatic_pcs_7_ipc647dMatch-

Node

siemens simatic_pcs_7_ipc847c_firmwareRange<6.2.61.3535

AND

siemens simatic_pcs_7_ipc847cMatch-

Node

siemens simatic_pcs_7_ipc847d_firmwareRange<9.1.41.3024

AND

siemens simatic_pcs_7_ipc847dMatch-

Node

siemens simatic_pcs_7_ipc427e_firmwareMatch-

AND

siemens simatic_pcs_7_ipc427eMatch-

Node

siemens simatic_pcs_7_ipc547g_firmwareRange<11.0.26.3000

AND

siemens simatic_pcs_7_ipc547gMatch-

Node

siemens simatic_pcs_7_ipc477d_firmwareMatch-

AND

siemens simatic_pcs_7_ipc477dMatch-

Node

siemens simatic_ipc427d_firmwareMatch-

AND

siemens simatic_ipc427dMatch-

Node

siemens simatic_ipc427e_firmwareRange<21.01.05

AND

siemens simatic_ipc427eMatch-

Node

siemens simotion_p320-4_s_firmwareRange<17.02.06.83.1

AND

siemens simotion_p320-4_sMatch-

Node

siemens sinumerik_pcu50.5-p_firmwareRange<6.2.61.3535

AND

siemens sinumerik_pcu_50.5-pMatch-

Node

intel active_management_technology_firmwareMatch6.0

intel active_management_technology_firmwareMatch6.1

intel active_management_technology_firmwareMatch6.2

intel active_management_technology_firmwareMatch7.0

intel active_management_technology_firmwareMatch7.1

intel active_management_technology_firmwareMatch8.0

intel active_management_technology_firmwareMatch8.1

intel active_management_technology_firmwareMatch9.0

intel active_management_technology_firmwareMatch9.1

intel active_management_technology_firmwareMatch9.5

intel active_management_technology_firmwareMatch10.0

intel active_management_technology_firmwareMatch11.0

intel active_management_technology_firmwareMatch11.5

intel active_management_technology_firmwareMatch11.6

[
  {
    "product": "Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later"
      }
    ]
  }
]

Source	Link
embedi	www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
tenable	www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
downloadmirror	www.downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
h20566	www.h20566.www2.hpe.com/hpsc/doc/public/display
securitytracker	www.securitytracker.com/id/1038385
security-center	www.security-center.intel.com/advisory.aspx
oracle	www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
embedi	www.embedi.com/news/mythbusters-cve-2017-5689
security	www.security.netapp.com/advisory/ntap-20170509-0001/

Parameter	Position	Path	Description	CWE
Authorization	header	/hw-sys.htm	Intel AMT Digest Authentication Bypass via /hw-sys.htm endpoint allowing unauthorized access.	CWE-269

17 Jun 2026 01:21Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

CVSS 210

EPSS0.92189

SSVC