CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2017-5689

CVSS 9.8v3.1pub. 2017-05-02upd. 2026-04-22

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • HPE Proliant Ml10 Gen9 Server

    HW
    Hpe
    all versions

  • HPE Proliant Ml10 Gen9 Server Firmware

    OS
    Hpe
    5.0

  • Intel Active Management Technology Firmware

    OS
    Intel
    10.011.011.511.66.06.16.27.07.18.08.19.09.19.5

  • Siemens Simatic Field Pg M3

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M3 Firmware

    OS
    Siemens
    < 6.2.61.3535

  • Siemens Simatic Field Pg M4

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M4 Firmware

    OS
    Siemens
    < 18.01.06

  • Siemens Simatic Field Pg M5

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M5 Firmware

    OS
    Siemens
    < 22.01.03

  • Siemens Simatic Ipc427d

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427d Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc427e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427e Firmware

    OS
    Siemens
    < 21.01.05

  • Siemens Simatic Ipc477d

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477d Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc477e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Firmware

    OS
    Siemens
    < 21.01.05

  • Siemens Simatic Ipc547d

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc547d Firmware

    OS
    Siemens
    < 7.1.91.3272

  • Siemens Simatic Ipc547e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc547e Firmware

    OS
    Siemens
    < 9.1.41.3024

  • Siemens Simatic Ipc547g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc547g Firmware

    OS
    Siemens
    < 11.0.26.3000

  • Siemens Simatic Ipc627c

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627c Firmware

    OS
    Siemens
    < 6.2.61.3535

  • Siemens Simatic Ipc627d

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627d Firmware

    OS
    Siemens
    < 9.1.41.3024

  • Siemens Simatic Ipc647c

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc647c Firmware

    OS
    Siemens
    < 6.2.61.3535

  • Siemens Simatic Ipc647d

    HW
    Siemens
    all versions

CISA KEV — detailsi

Vendori
Intel
Producti
Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
Added to KEVi
January 28, 2022
Remediation deadline (US Federal)i
July 28, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Intel products contain a vulnerability which can allow attackers to perform privilege escalation.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 28 lipca 2022
CWE
References

Related vulnerabilities

CVE-2022-30601CRITICAL9.8PL ✓same product

Niewystarczająco chronione dane uwierzytelniające w Intel AMT i Intel Standard Manageability

CVE-2020-8747CRITICAL9.1PL ✓same product

Out-of-bounds read w Intel AMT — ujawnienie danych i DoS przez sieć

CVE-2020-8752CRITICAL9.8PL ✓same product

Out-of-bounds write w IPv6 Intel AMT/ISM umożliwia privilege escalation

CVE-2020-8758CRITICAL9.8PL ✓same product

Nieprawidłowe ograniczenia bufora w Intel AMT i ISM — privilege escalation przez sieć

CVE-2020-0595CRITICAL9.8PL ✓same product

Use-after-free w IPv6 w Intel AMT i ISM — eskalacja uprawnień przez sieć