Improper privilege management in Intel Active Mangement Technology, Intel Small Business…
Priority CRITICAL 100Exploited in the wildCWE-269Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-269.
Summary
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Why it matters now
Exploitation Active In CISA KEV since 2022-01-28CISA due date 2022-07-28
EPSS 0.92189 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Intel | Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability | fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later | — | No fix listed | CNA |
- Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability VendorIntel Affected fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later Fixed in — No fix listed CNA
CPE configurations NVD · 86
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Hewlett Packard Enterprise (HPE) |
| cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise (HPE) |
| cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Hewlett Packard Enterprise (HPE)
- cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise (HPE)
- cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 76 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:* | before 11.0.26.3000 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc547g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:* | before 7.1.91.3272 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:* | before 21.01.05 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:-:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:pro:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:* | before 18.01.06 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:* | before 22.01.03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:*:*:*:*:*:*:*:* | before 21.01.04 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:*:*:*:*:*:*:*:* | before 7.1.91.3272 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:* | before 11.0.26.3000 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:*:*:*:*:*:*:*:* | before 9.1.41.3024 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:* | before 21.01.05 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simotion_p320-4_s_firmware:*:*:*:*:*:*:*:* | before 17.02.06.83.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simotion_p320-4_s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:* | before 6.2.61.3535 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:intel:active_management_technology_firmware:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:9.5:*:*:*:*:*:*:* | 9.5 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:11.5:*:*:*:*:*:*:* | 11.5 | Vulnerable | Intel |
| cpe:2.3:o:intel:active_management_technology_firmware:11.6:*:*:*:*:*:*:* | 11.6 | Vulnerable | Intel |
- cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:* Versions before 11.0.26.3000 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc547g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:* Versions before 7.1.91.3272 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:* Versions before 21.01.05 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:-:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_ipc477d_firmware:-:*:*:*:pro:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:* Versions before 18.01.06 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:* Versions before 22.01.03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:*:*:*:*:*:*:*:* Versions before 21.01.04 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:*:*:*:*:*:*:*:* Versions before 7.1.91.3272 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:* Versions before 11.0.26.3000 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:*:*:*:*:*:*:*:* Versions before 9.1.41.3024 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:* Versions before 21.01.05 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simotion_p320-4_s_firmware:*:*:*:*:*:*:*:* Versions before 17.02.06.83.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simotion_p320-4_s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:* Versions before 6.2.61.3535 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:intel:active_management_technology_firmware:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:9.5:*:*:*:*:*:*:* Versions 9.5 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:11.5:*:*:*:*:*:*:* Versions 11.5 Vulnerable ·Intel
- cpe:2.3:o:intel:active_management_technology_firmware:11.6:*:*:*:*:*:*:* Versions 11.6 Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2022-01-28 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2017-5689
- 2026-10-03 Alias added: GHSA-v6j9-wwcx-4984
References
Patch 2
Advisory 5
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
- https://security.netapp.com/advisory/ntap-20170509-0001/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
- https://www.embedi.com/news/mythbusters-cve-2017-5689
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf
More Intel Active Management Technology Firmware vulnerabilities
- TI-2022-12740 Insufficiently protected credentials in Intel AMT and Intel Standard Manageability CVSS 3.1CRITICAL 9.8
- TI-2020-00572 Use after free in Intel AMT and Intel ISM CVSS 3.1CRITICAL 9.8
- TI-2020-00571 Out-of-bounds read in Intel AMT and Intel ISM CVSS 3.1CRITICAL 9.8
- TI-2020-07022 Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and… CVSS 3.1CRITICAL 9.8
- TI-2019-08330 Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and… CVSS 3.1CRITICAL 9.8
- TI-2020-07016 Out-of-bounds write in Intel AMT, Intel ISM versions CVSS 3.1CRITICAL 9.8
Sources
- CVE-2017-5689 · CVE Program
- CVE-2017-5689 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-v6j9-wwcx-4984 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences