CVE-2017-5697
Medium
Description
Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page.
SeverityMedium
CVSS6.5
Exploit probability—
ProductIntel Active Management Technology Firmware
PublishedJun 14, 2017
First seenJun 14, 2017
How to fix
Update
- intel active_management_technology_firmware9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, 11.6.25.1129 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel active_management_technology_firmware | 9.1 ≤ v < 9.1.40.1000, 9.5 ≤ v < 9.5.60.1952, 10.0 ≤ v < 10.0.50.1004, 11.0 ≤ v < 11.0.0.1205, 11.6 ≤ v < 11.6.25.1129 | 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, 11.6.25.1129 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.