HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass

🗓️ 26 May 2017 00:00:00Reported by hpeType

hpe

hpe🔗 support.hpe.com👁 2 Views

The HPE ML10 Gen9 remote access bypass (CVE-2017-5689) requires ROM 1.06+ and ME toolkit upgrade.

Reporter	Title	Published	Views	Family All 64
0day.today	Intel AMT Digest Authentication Bypass Scanner Exploit	5 Jun 201700:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Hpe Proliant_Ml10_Gen9_Server_Firmware	4 May 201701:51	–	githubexploit
Tenable Nessus	Intel Active Management Technology 6.x < 6.2.61.3535 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 7.x < 7.1.91.3272 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 8.x < 8.1.71.3608 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.x < 9.1.41.3024 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 9.5.x < 9.5.61.3012 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 10.x < 10.0.55.3000 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.0.x < 11.0.25.3001 RCE	3 May 201700:00	–	nessus
Tenable Nessus	Intel Active Management Technology 11.5.x / 11.6.x < 11.6.27.3264 RCE	3 May 201700:00	–	nessus

26 May 2017 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.8

CVSS 210

CVSS 38.1

EPSS0.92189

SSVC

HPE ProLiant ML10 Gen9 Remote access bypass CVE 2017 5689 Read only memory Management Engine toolkit