← Vulnerability Intelligence

CVE-2017-5689

Critical 9.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Metrics

CVSS 3.1
9.8 (CRITICAL) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
92% (percentile: 100) as of 1 November 2026
CWE
CWE-269

Affected products

hpe: proliant ml10 gen9 server firmware; hpe: proliant ml10 gen9 server; siemens: simatic itp1000 firmware; siemens: simatic itp1000; siemens: simatic ipc847d firmware; siemens: simatic ipc847d; siemens: simatic ipc847c firmware; siemens: simatic ipc847c; siemens: simatic ipc827d firmware; siemens: simatic ipc827d; siemens: simatic ipc827c firmware; siemens: simatic ipc827c; siemens: simatic ipc677d firmware; siemens: simatic ipc677d; siemens: simatic ipc677c firmware

References