CVE-2017-5689
KEVIntel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Description
Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVSS 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublishedMay 2, 2017
Last modifiedJun 17, 2026
Added to KEVJan 28, 2022
Remediation dueJul 28, 2022
References
- oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatchThird Party Advisory
- securityfocus.com/bid/98269Broken LinkThird Party Advisory
- securitytracker.com/id/1038385Broken LinkThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfThird Party Advisory
- downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfBroken Link
- h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usThird Party Advisory
- security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frPatchVendor Advisory
- security.netapp.com/advisory/ntap-20170509-0001/Third Party Advisory
- embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfBroken LinkExploit
- embedi.com/news/mythbusters-cve-2017-5689Broken LinkThird Party Advisory
- tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityTechnical DescriptionThird Party Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689US Government Resource
0 recent articles mention this CVE
88
Risk assessment · Critical
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1552 days
- CVSS
- 9.8 CRITICAL
- EPSS (30-day exploit probability)
- 92.2% · top 1% of all CVEs
- Weakness
- NVD-CWE-noinfo
- Attack vector
- Network, remotely reachable
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.