CVE-2017-5689

CVE-2017-5689 is a critical-severity (CVSS 9.8) vulnerability in Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability. CISA added it to the Known Exploited Vulnerabilities catalog on January 28, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by July 28, 2022. CISA does not currently list it as used in ransomware campaigns. Intel has 2 vulnerabilities in the KEV catalog, 1 of them linked to ransomware.

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.securityfocus.com/bid/98269
• http://www.securitytracker.com/id/1038385
• https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
• https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
• https://security.netapp.com/advisory/ntap-20170509-0001/