Skip to content
Fencer Vulns
critical 9.8

CVE-2017-5689 kev in the critical feed json

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (…

published 2017-05-02 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-14766

cvss
9.8
version 3.1, CNA
cisa kev
Exploited
added 2022-01-28
epss
92.2%
EPSS 92.2% chance of exploitation in 30 days, percentile 99.8%
public exploits
2
Metasploit, Exploit-DB, plus a Nuclei check

Summary

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Patch / fix

cisa required action Apply updates per vendor instructions.

  • siemens simatic_itp1000_firmware 9.1.41.3024
  • siemens simatic_ipc847d_firmware 9.1.41.3024
  • siemens simatic_ipc847c_firmware 6.2.61.3535
  • siemens simatic_ipc827d_firmware 9.1.41.3024
  • siemens simatic_ipc827c_firmware 6.2.61.3535
  • siemens simatic_ipc677d_firmware 9.1.41.3024
  • siemens simatic_ipc677c_firmware 6.2.61.3535
  • siemens simatic_ipc647d_firmware 9.1.41.3024
  • siemens simatic_ipc647c_firmware 6.2.61.3535
  • siemens simatic_ipc627d_firmware 9.1.41.3024
  • siemens simatic_ipc627c_firmware 6.2.61.3535
  • siemens simatic_ipc547g_firmware 11.0.26.3000
  • siemens simatic_ipc547e_firmware 9.1.41.3024
  • siemens simatic_ipc547d_firmware 7.1.91.3272
  • siemens simatic_ipc477e_firmware 21.01.05
  • siemens simatic_field_pg_m3_firmware 6.2.61.3535
  • siemens simatic_field_pg_m4_firmware 18.01.06
  • siemens simatic_field_pg_m5_firmware 22.01.03
  • siemens simatic_pcs_7_ipc427e_firmware 21.01.04
  • siemens simatic_pcs_7_ipc547d_firmware 7.1.91.3272

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-17-180-01A updated cvss 9.8

ICSA-17-180-01A_Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)

  • Siemens SINUMERIK Panel Control Unit (PCU) Intel Core i5 Intel Core i7, Intel XEON
    affected: mitigation “Siemens has provided firmware updates for the affected industrial PCs to address this vulnerability. These updates can be found on their web site at the following location:”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (Metasploit auxiliary/scanner/http/intel_amt_digest_bypass)
  3. Added to CISA KEV
  4. CISA patch deadline
  5. CISA SSVC: exploitation active

Known exploited

Added
4 y ago
Patch by
2022-07-28 (4 y ago)
Ransomware
Not known
Required action
Apply updates per vendor instructions.
Vendor, product
Intel, Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
CISA name
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
yes
Technical impact
total
Assessed
21 mo ago

Exploit prediction

92.19% chance of exploitation in the next 30 days, higher than 99.8% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.