What’s Vulnerable › Vulnerabilities

CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-01-28
• EPSS: 92.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-02 · updated 2026-06-17
• Weakness: CWE-269

Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Affected products

• HPE Proliant Ml10 Gen9 Server Firmware: 5.0
• Intel(R) Active Management Technology (AMT): 6.0, 6.1, 6.2, 7.0, 7.1, 8.0 (+8)
• Siemens Simatic Field Pg M3 Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Field Pg M4 Firmware: before 18.01.06 — fixed in 18.01.06
• Siemens Simatic Field Pg M5 Firmware: before 22.01.03 — fixed in 22.01.03
• Siemens Simatic Ipc427D Firmware: all versions
• Siemens Simatic Ipc427E Firmware: before 21.01.05 — fixed in 21.01.05
• Siemens Simatic Ipc477D Firmware: all versions
• Siemens Simatic Ipc477E Firmware: before 21.01.05 — fixed in 21.01.05
• Siemens Simatic Ipc547D Firmware: before 7.1.91.3272 — fixed in 7.1.91.3272
• Siemens Simatic Ipc547E Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Ipc547G Firmware: before 11.0.26.3000 — fixed in 11.0.26.3000
• Siemens Simatic Ipc627C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Ipc627D Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Ipc647C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Ipc647D Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Ipc677C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Ipc677D Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Ipc827C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Ipc827D Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Ipc847C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Ipc847D Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Itp1000 Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Pcs 7 Ipc427E Firmware: before 21.01.04 — fixed in 21.01.04
• Siemens Simatic Pcs 7 Ipc477D Firmware: all versions
• Siemens Simatic Pcs 7 Ipc547D Firmware: before 7.1.91.3272 — fixed in 7.1.91.3272
• Siemens Simatic Pcs 7 Ipc547E Firmware: before 9.1.41.3024 — fixed in 9.1.41.3024
• Siemens Simatic Pcs 7 Ipc547G Firmware: before 11.0.26.3000 — fixed in 11.0.26.3000
• Siemens Simatic Pcs 7 Ipc627C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535
• Siemens Simatic Pcs 7 Ipc647C Firmware: before 6.2.61.3535 — fixed in 6.2.61.3535

How to fix

Upgrade to a fixed version: Siemens Simatic Field Pg M3 Firmware 6.2.61.3535; Siemens Simatic Field Pg M4 Firmware 18.01.06; Siemens Simatic Field Pg M5 Firmware 22.01.03; Siemens Simatic Ipc427E Firmware 21.01.05; Siemens Simatic Ipc477E Firmware 21.01.05; Siemens Simatic Ipc547D Firmware 7.1.91.3272; Siemens Simatic Ipc547E Firmware 9.1.41.3024; Siemens Simatic Ipc547G Firmware 11.0.26.3000; Siemens Simatic Ipc627C Firmware 6.2.61.3535; Siemens Simatic Ipc627D Firmware 9.1.41.3024; Siemens Simatic Ipc647C Firmware 6.2.61.3535; Siemens Simatic Ipc647D Firmware 9.1.41.3024. Check the vendor advisory for mitigations.

References

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.securityfocus.com/bid/98269
• http://www.securitytracker.com/id/1038385
• https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
• https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
• https://security.netapp.com/advisory/ntap-20170509-0001/
• https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
• https://www.embedi.com/news/mythbusters-cve-2017-5689
• https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Get alerted when CVE-2017-5689 or the next vulnerability affects your stack