CVE-2017-5689
CriticalActively exploited (CISA KEV)
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
SeverityCritical
CVSS9.8
Exploit probability—
ProductIntel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
PublishedMay 2, 2017
First seenMay 2, 2017
Added to KEVJan 28, 2022
Weakness typeCWE-269Improper privilege management
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Jul 28, 2022Update
- siemens simatic_itp1000_firmware9.1.41.3024 or later
- siemens simatic_ipc847d_firmware9.1.41.3024 or later
- siemens simatic_ipc847c_firmware6.2.61.3535 or later
- siemens simatic_ipc827d_firmware9.1.41.3024 or later
- siemens simatic_ipc827c_firmware6.2.61.3535 or later
- siemens simatic_ipc677d_firmware9.1.41.3024 or later
- siemens simatic_ipc677c_firmware6.2.61.3535 or later
- siemens simatic_ipc647d_firmware9.1.41.3024 or later
- siemens simatic_ipc647c_firmware6.2.61.3535 or later
- siemens simatic_ipc627d_firmware9.1.41.3024 or later
- siemens simatic_ipc627c_firmware6.2.61.3535 or later
- siemens simatic_ipc547g_firmware11.0.26.3000 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel active_management_technology_firmware | 6.0, 6.1, 6.2, 7.0, 7.1, 8.0, 8.1, 9.0, 9.1, 9.5, 10.0, 11.0, 11.5, 11.6 | — |
| hpe proliant_ml10_gen9_server_firmware | 5.0 | — |
| siemens simatic_itp1000_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc847d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc847c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc827d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc827c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc677d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc677c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc647d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc647c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc627d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc627c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_ipc547g_firmware | v < 11.0.26.3000 | 11.0.26.3000 |
| siemens simatic_ipc547e_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_ipc547d_firmware | v < 7.1.91.3272 | 7.1.91.3272 |
| siemens simatic_ipc477e_firmware | v < 21.01.05 | 21.01.05 |
| siemens simatic_ipc477d_firmware | No range specified | — |
| siemens simatic_field_pg_m3_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_field_pg_m4_firmware | v < 18.01.06 | 18.01.06 |
| siemens simatic_field_pg_m5_firmware | v < 22.01.03 | 22.01.03 |
| siemens simatic_pcs_7_ipc427e_firmware | v < 21.01.04, No range specified | 21.01.04 |
| siemens simatic_pcs_7_ipc547d_firmware | v < 7.1.91.3272 | 7.1.91.3272 |
| siemens simatic_pcs_7_ipc547e_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_pcs_7_ipc547g_firmware | v < 11.0.26.3000 | 11.0.26.3000 |
| siemens simatic_pcs_7_ipc627c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_pcs_7_ipc677c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_pcs_7_ipc647c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_pcs_7_ipc647d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_pcs_7_ipc847c_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
| siemens simatic_pcs_7_ipc847d_firmware | v < 9.1.41.3024 | 9.1.41.3024 |
| siemens simatic_pcs_7_ipc477d_firmware | No range specified | — |
| siemens simatic_ipc427d_firmware | No range specified | — |
| siemens simatic_ipc427e_firmware | v < 21.01.05 | 21.01.05 |
| siemens simotion_p320-4_s_firmware | v < 17.02.06.83.1 | 17.02.06.83.1 |
| siemens sinumerik_pcu50.5-p_firmware | v < 6.2.61.3535 | 6.2.61.3535 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.