Siemens SIMATIC Field Pg m3 Firmware vulnerabilities

3 CVEs affecting Siemens SIMATIC Field Pg m3 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-5712, published 2017-11-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability, published 2017-05-02. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 92.2% chance of exploitation in the next 30 days. An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged…
CVE-2017-5712, published 2017-11-21. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to…
CVE-2017-5711, published 2017-11-21. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to…