CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 92.2% chance of exploitation in the next 30 days.

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Affected products

  • HPE Proliant ML10 GEN9 Server Firmware: version 5.0 only
  • Intel Active Management Technology Firmware: version 6.0 only; version 6.1 only; version 6.2 only; version 7.0 only; version 7.1 only; version 8.0 only; …
  • Siemens SIMATIC Field Pg m3 Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC Field Pg m4 Firmware: before 18.01.06 (fixed in 18.01.06)
  • Siemens SIMATIC Field Pg m5 Firmware: before 22.01.03 (fixed in 22.01.03)
  • Siemens SIMATIC IPC427D Firmware: affected versions not specified
  • Siemens SIMATIC IPC427E Firmware: before 21.01.05 (fixed in 21.01.05)
  • Siemens SIMATIC IPC477D Firmware: affected versions not specified
  • Siemens SIMATIC IPC477E Firmware: before 21.01.05 (fixed in 21.01.05)
  • Siemens SIMATIC IPC547D Firmware: before 7.1.91.3272 (fixed in 7.1.91.3272)
  • Siemens SIMATIC IPC547E Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC IPC547G Firmware: before 11.0.26.3000 (fixed in 11.0.26.3000)
  • Siemens SIMATIC IPC627C Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC IPC627D Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC IPC647C Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC IPC647D Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC IPC677C Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC IPC677D Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC IPC827C Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC IPC827D Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC IPC847C Firmware: before 6.2.61.3535 (fixed in 6.2.61.3535)
  • Siemens SIMATIC IPC847D Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC ITP1000 Firmware: before 9.1.41.3024 (fixed in 9.1.41.3024)
  • Siemens SIMATIC Pcs 7 IPC427E Firmware: before 21.01.04 (fixed in 21.01.04); affected versions not specified
  • Siemens SIMATIC Pcs 7 IPC477D Firmware: affected versions not specified
  • and 11 more

Published 2017-05-02. Last modified 2026-06-17.