Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-5689 Details

Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689	CISA-ADP	US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf	CVE	Third Party Advisory
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf	CVE	Broken Link
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us	CVE	Third Party Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr	CVE	PatchVendor Advisory
https://security.netapp.com/advisory/ntap-20170509-0001/	CVE	Third Party Advisory
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf	CVE	Broken LinkExploitTechnical DescriptionThird Party Advisory
https://www.embedi.com/news/mythbusters-cve-2017-5689	CVE	Broken LinkThird Party Advisory
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability	CVE	Technical DescriptionThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	CVE	PatchThird Party Advisory
http://www.securityfocus.com/bid/98269	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038385	CVE	Broken LinkThird Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf	[email protected]	Third Party Advisory
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf	[email protected]	Broken Link
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us	[email protected]	Third Party Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr	[email protected]	PatchVendor Advisory
https://security.netapp.com/advisory/ntap-20170509-0001/	[email protected]	Third Party Advisory
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf	[email protected]	Broken LinkExploitTechnical DescriptionThird Party Advisory
https://www.embedi.com/news/mythbusters-cve-2017-5689	[email protected]	Broken LinkThird Party Advisory
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability	[email protected]	Technical DescriptionThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	[email protected]	PatchThird Party Advisory
http://www.securityfocus.com/bid/98269	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038385	[email protected]	Broken LinkThird Party AdvisoryVDB Entry

see all 23 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability	Jan 28, 2022	Jul 28, 2022	Apply updates per vendor instructions.

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]
CWE-269	Improper Privilege Management	CISA-ADP

Affected Products

Product	Versions
hpe proliant ml10 gen9 server firmware	5.0
CPE cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:::::::* Remediation No remediation found in references.
hpe proliant ml10 gen9 server	All versions
CPE cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:::::::* Remediation No remediation found in references.
siemens simatic itp1000 firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_itp1000_firmware:::::::: Remediation No remediation found in references.
siemens simatic itp1000	All versions
CPE cpe:2.3:h:siemens:simatic_itp1000:-:::::::* Remediation No remediation found in references.
siemens simatic ipc847d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc847d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc847d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc847d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc847c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_ipc847c_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc847c	All versions
CPE cpe:2.3:h:siemens:simatic_ipc847c:-:::::::* Remediation No remediation found in references.
siemens simatic ipc827d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc827d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc827d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc827d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc827c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_ipc827c_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc827c	All versions
CPE cpe:2.3:h:siemens:simatic_ipc827c:-:::::::* Remediation No remediation found in references.
siemens simatic ipc677d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc677d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc677d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc677d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc677c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_ipc677c_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc677c	All versions
CPE cpe:2.3:h:siemens:simatic_ipc677c:-:::::::* Remediation No remediation found in references.
siemens simatic ipc647d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc647d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc647d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc647d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc647c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_ipc647c_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc647c	All versions
CPE cpe:2.3:h:siemens:simatic_ipc647c:-:::::::* Remediation No remediation found in references.
siemens simatic ipc627d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc627d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc627d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc627d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc627c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_ipc627c_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc627c	All versions
CPE cpe:2.3:h:siemens:simatic_ipc627c:-:::::::* Remediation No remediation found in references.
siemens simatic ipc547g firmware	< 11.0.26.3000
CPE cpe:2.3:o:siemens:simatic_ipc547g_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc547g	All versions
CPE cpe:2.3:h:siemens:simatic_ipc547g:-:::::::* Remediation No remediation found in references.
siemens simatic ipc547e firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_ipc547e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc547e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc547e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc547d firmware	< 7.1.91.3272
CPE cpe:2.3:o:siemens:simatic_ipc547d_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc547d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc547d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc477e firmware	< 21.01.05
CPE cpe:2.3:o:siemens:simatic_ipc477e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc477e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc477e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc477d firmware	All versions
CPE cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::-::: cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::pro::: Remediation No remediation found in references.
siemens simatic ipc477d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc477d:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m3 firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:::::::: Remediation No remediation found in references.
siemens simatic field pg m3	All versions
CPE cpe:2.3:h:siemens:simatic_field_pg_m3:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m4 firmware	< 18.01.06
CPE cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:::::::: Remediation No remediation found in references.
siemens simatic field pg m4	All versions
CPE cpe:2.3:h:siemens:simatic_field_pg_m4:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m5 firmware	< 22.01.03
CPE cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:::::::: Remediation No remediation found in references.
siemens simatic field pg m5	All versions
CPE cpe:2.3:h:siemens:simatic_field_pg_m5:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc427e firmware	< 21.01.04
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:::::::: cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc427e	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc547d firmware	< 7.1.91.3272
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc547d	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc547e firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc547e	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc547g firmware	< 11.0.26.3000
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc547g	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc627c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc627c	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc677c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc677c	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc647c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc647c	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc647d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc647d	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc847c firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc847c	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc847d firmware	< 9.1.41.3024
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:::::::: Remediation No remediation found in references.
siemens simatic pcs 7 ipc847d	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc477d firmware	All versions
CPE cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic pcs 7 ipc477d	All versions
CPE cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc427d firmware	All versions
CPE cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic ipc427d	All versions
CPE cpe:2.3:h:siemens:simatic_ipc427d:-:::::::* Remediation No remediation found in references.
siemens simatic ipc427e firmware	< 21.01.05
CPE cpe:2.3:o:siemens:simatic_ipc427e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc427e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc427e:-:::::::* Remediation No remediation found in references.
siemens simotion p320-4 s firmware	< 17.02.06.83.1
CPE cpe:2.3:o:siemens:simotion_p320-4_s_firmware:::::::: Remediation No remediation found in references.
siemens simotion p320-4 s	All versions
CPE cpe:2.3:h:siemens:simotion_p320-4_s:-:::::::* Remediation No remediation found in references.
siemens sinumerik pcu50.5-p firmware	< 6.2.61.3535
CPE cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:::::::: Remediation No remediation found in references.
siemens sinumerik pcu 50.5-p	All versions
CPE cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:::::::* Remediation No remediation found in references.
intel active management technology firmware	6.0 6.1 6.2 7.0 7.1
CPE cpe:2.3:o:intel:active_management_technology_firmware:6.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:6.1:::::::* cpe:2.3:o:intel:active_management_technology_firmware:6.2:::::::* cpe:2.3:o:intel:active_management_technology_firmware:7.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:7.1:::::::* cpe:2.3:o:intel:active_management_technology_firmware:8.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:8.1:::::::* cpe:2.3:o:intel:active_management_technology_firmware:9.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:9.1:::::::* cpe:2.3:o:intel:active_management_technology_firmware:9.5:::::::* cpe:2.3:o:intel:active_management_technology_firmware:10.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:11.0:::::::* cpe:2.3:o:intel:active_management_technology_firmware:11.5:::::::* cpe:2.3:o:intel:active_management_technology_firmware:11.6:::::::* Remediation No remediation found in references.

Change History

21 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Apr 22, 2026	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Apr 17, 2025	Modified Analysis	[email protected]
Feb 7, 2025	CVE Modified	CISA-ADP
Jan 28, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 18, 2020	Modified Analysis	[email protected]
Feb 10, 2020	CVE Modified	[email protected]
Oct 3, 2019	CWE Remap	[email protected]
Nov 10, 2017	CVE Modified	[email protected]
Aug 9, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
May 30, 2017	CVE Modified	[email protected]
May 17, 2017	Initial Analysis	[email protected]
May 7, 2017	CVE Modified	[email protected]
May 5, 2017	CVE Modified	[email protected]

CVE-2017-5689 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE