What’s Vulnerable › Vulnerabilities

CVE-2017-5697

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-14 · updated 2026-06-17
• Weakness: CWE-1021

Description

Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page.

Affected products

• Intel(R) Active Management Technology (AMT): from 9.1 before 9.1.40.1000; from 9.5 before 9.5.60.1952; from 10.0 before 10.0.50.1004; from 11.0 before 11.0.0.1205; from 11.6 before 11.6.25.1129 — fixed in 10.0.50.1004, 11.0.0.1205, 11.6.25.1129, 9.1.40.1000, 9.5.60.1952

How to fix

Upgrade to a fixed version: Intel(R) Active Management Technology (AMT) 10.0.50.1004, 11.0.0.1205, 11.6.25.1129, 9.1.40.1000. Check the vendor advisory for mitigations.

References

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00081&languageid=en-fr
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00081&languageid=en-fr

Get alerted when CVE-2017-5697 or the next vulnerability affects your stack