{"id":"CVE-2017-5689","aliases":["EUVD-2017-14766","GHSA-v6j9-wwcx-4984"],"status":"published","title":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability...","description":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.92189,"percentile":0.99823,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-269"],"published":"2017-05-02T14:00:00Z","modified":"2026-06-17T01:21:02Z","kev":{"date_added":"2022-01-28","due_date":"2022-07-28","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-01-28"},{"source":"kev","since":"2022-01-28"}],"exploits":[{"source":"pocgithub","id":"CerberusSecurity/CVE-2017-5689","title":"CerberusSecurity/CVE-2017-5689","date":"2017-05-04","url":"https://github.com/CerberusSecurity/CVE-2017-5689"},{"source":"pocgithub","id":"Bijaye/intel_amt_bypass","title":"Bijaye/intel_amt_bypass","date":"2017-05-09","url":"https://github.com/Bijaye/intel_amt_bypass"},{"source":"exploitdb","id":"EDB-43385","title":"Intel Active Management Technology - System Privileges","type":"remote","platform":"multiple","date":"2017-05-10","url":"https://www.exploit-db.com/exploits/43385"},{"source":"pocgithub","id":"MlSebrell/amthoneypot","title":"MlSebrell/amthoneypot","date":"2017-05-12","url":"https://github.com/MlSebrell/amthoneypot"},{"source":"pocgithub","id":"embedi/amt_auth_bypass_poc","title":"embedi/amt_auth_bypass_poc","date":"2017-07-27","url":"https://github.com/embedi/amt_auth_bypass_poc"},{"source":"pocgithub","id":"TheWay-hue/CVE-2017-5689-Checker","title":"TheWay-hue/CVE-2017-5689-Checker","date":"2021-07-14","url":"https://github.com/TheWay-hue/CVE-2017-5689-Checker"},{"source":"pocgithub","id":"aix567/C-A-S","title":"aix567/C-A-S","date":"2026-10-25","url":"https://github.com/aix567/C-A-S"},{"source":"pocgithub","id":"unitnikolai/intel-me-remote-exploit","title":"unitnikolai/intel-me-remote-exploit","date":"2026-11-03","url":"https://github.com/unitnikolai/intel-me-remote-exploit"},{"source":"metasploit","id":"auxiliary/scanner/http/intel_amt_digest_bypass","title":"Intel AMT Digest Authentication Bypass Scanner","type":"auxiliary","date":"2017-05-05","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/intel_amt_digest_bypass"},{"source":"nuclei","id":"CVE-2017-5689","title":"Intel Active Management - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5689.yaml"}],"products":[{"vendor":"hpe","product":"proliant_ml10_gen9_server_firmware"},{"vendor":"intel","product":"active management technology (amt), small business technology (sbt), and standard manageability"},{"vendor":"intel","product":"active_management_technology_firmware"},{"vendor":"intel corporation","product":"intel active mangement technology, intel small business technology, intel standard manageability"},{"vendor":"siemens","product":"simatic_field_pg_m3_firmware"},{"vendor":"siemens","product":"simatic_field_pg_m4_firmware"},{"vendor":"siemens","product":"simatic_field_pg_m5_firmware"},{"vendor":"siemens","product":"simatic_ipc427d_firmware"},{"vendor":"siemens","product":"simatic_ipc427e_firmware"},{"vendor":"siemens","product":"simatic_ipc477d_firmware"},{"vendor":"siemens","product":"simatic_ipc477e_firmware"},{"vendor":"siemens","product":"simatic_ipc547d_firmware"},{"vendor":"siemens","product":"simatic_ipc547e_firmware"},{"vendor":"siemens","product":"simatic_ipc547g_firmware"},{"vendor":"siemens","product":"simatic_ipc627c_firmware"},{"vendor":"siemens","product":"simatic_ipc627d_firmware"},{"vendor":"siemens","product":"simatic_ipc647c_firmware"},{"vendor":"siemens","product":"simatic_ipc647d_firmware"},{"vendor":"siemens","product":"simatic_ipc677c_firmware"},{"vendor":"siemens","product":"simatic_ipc677d_firmware"},{"vendor":"siemens","product":"simatic_ipc827c_firmware"},{"vendor":"siemens","product":"simatic_ipc827d_firmware"},{"vendor":"siemens","product":"simatic_ipc847c_firmware"},{"vendor":"siemens","product":"simatic_ipc847d_firmware"},{"vendor":"siemens","product":"simatic_itp1000_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc427e_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc477d_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc547d_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc547e_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc547g_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc627c_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc647c_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc647d_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc677c_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc847c_firmware"},{"vendor":"siemens","product":"simatic_pcs_7_ipc847d_firmware"},{"vendor":"siemens","product":"simotion_p320-4_s_firmware"},{"vendor":"siemens","product":"sinumerik_pcu50.5-p_firmware"}],"references":[{"url":"https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability","tags":["x_refsource_MISC","x_transferred","Technical Description","Third Party Advisory"]},{"url":"https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/98269","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038385","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://security.netapp.com/advisory/ntap-20170509-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf","tags":["x_refsource_MISC","x_transferred","Broken Link","Exploit","Technical Description","Third Party Advisory"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075\u0026languageid=en-fr","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03754en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://www.embedi.com/news/mythbusters-cve-2017-5689","tags":["x_refsource_MISC","x_transferred","Broken Link","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5689"},{"url":"https://security.netapp.com/advisory/ntap-20170509-0001"},{"url":"https://github.com/advisories/GHSA-v6j9-wwcx-4984"}],"sources":{"cve":[{"id":"CVE-2017-5689","description":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","status":"published","published":"2017-05-02T14:00:00Z","modified":"2025-10-21T23:55:41.384Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:33:12.599234Z"}],"euvd":[{"id":"EUVD-2017-14766","description":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","status":"published","published":"2017-05-02T14:00:00Z","modified":"2025-10-21T23:55:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-01-28","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-v6j9-wwcx-4984","title":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability...","description":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","status":"published","published":"2022-05-13T01:28:19Z","modified":"2025-10-22T00:31:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:04:03.556367Z"}],"kev":[{"id":"CVE-2017-5689","title":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","description":"Intel products contain a vulnerability which can allow attackers to perform privilege escalation.","kev":{"date_added":"2022-01-28","due_date":"2022-07-28","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2017-5689","description":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","status":"published","published":"2017-05-02T14:59:00.52Z","modified":"2026-06-17T01:21:02.563Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:03:47.848196Z"}]}}