ZeroDay Findings
Sign inSign up

Findings

CVE-2017-5689

Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Published May 2, 2017 · updated Jun 16, 2026 · hpe proliant ml10 gen9 server firmware

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Timeline

Detection, updates, and resolution for this record.

  1. May 2, 2017 · Catalog

    Detected

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Mana

  2. Jan 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 28, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Mana

Required action

Apply updates per vendor instructions.

CISA due date Jul 28, 2022

Affected

  • cpe hpe/proliant ml10 gen9 server firmware5.0
  • cpe siemens/simatic ipc627c firmwareversion unspecified
  • cpe siemens/simatic ipc627d firmwareversion unspecified
  • cpe siemens/simatic ipc647c firmwareversion unspecified
  • cpe siemens/simatic ipc647d firmwareversion unspecified
  • cpe siemens/simatic ipc677c firmwareversion unspecified
  • cpe siemens/simatic ipc677d firmwareversion unspecified
  • cpe siemens/simatic ipc827c firmwareversion unspecified
  • cpe siemens/simatic ipc827d firmwareversion unspecified
  • cpe siemens/simatic ipc847c firmwareversion unspecified
  • cpe siemens/simatic ipc847d firmwareversion unspecified
  • cpe siemens/simatic itp1000 firmwareversion unspecified
  • vendor Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageabilityversion unspecified

Sources

  • CISA KEVCVE-2017-5689

    Intel products contain a vulnerability which can allow attackers to perform privilege escalation.

    cisa.gov
  • CVE.orgCVE-2017-5689

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-5689

    30-day exploitation probability 92.2%

    first.org
  • Exploit Database43385

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesauxiliary_scanner/http/intel_amt_digest_bypass

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2017-5689

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged netwo

    nvd.nist.gov

References