CVE-2017-5689 Information

Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT) Intel Standard Manageability (ISM) and Intel Small Business Technology (SBT).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html http://www.securityfocus.com/bid/98269 http://www.securitytracker.com/id/1038385 https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf https://downloadmirror.intel.com/26754/eng/INTEL-SA-0007520Mitigation20Guide-Rev201.1.pdf https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us https://security.netapp.com/advisory/ntap-20170509-0001/ https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf https://www.embedi.com/news/mythbusters-cve-2017-5689 https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

9.8