CVE-2017-5689

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
http://www.securityfocus.com/bid/98269	Third Party Advisory VDB Entry Broken Link
http://www.securitytracker.com/id/1038385	Third Party Advisory VDB Entry Broken Link
https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf	Third Party Advisory
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf	Broken Link
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us	Third Party Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20170509-0001/	Third Party Advisory
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf	Exploit Technical Description Third Party Advisory Broken Link
https://www.embedi.com/news/mythbusters-cve-2017-5689	Third Party Advisory Broken Link
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability	Technical Description Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
http://www.securityfocus.com/bid/98269	Third Party Advisory VDB Entry Broken Link
http://www.securitytracker.com/id/1038385	Third Party Advisory VDB Entry Broken Link
https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf	Third Party Advisory
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf	Broken Link
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us	Third Party Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20170509-0001/	Third Party Advisory
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf	Exploit Technical Description Third Party Advisory Broken Link
https://www.embedi.com/news/mythbusters-cve-2017-5689	Third Party Advisory Broken Link
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability	Technical Description Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:*:*:*:*:*:*:*

cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc847d:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc847c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc847c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc827d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc827d:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc827c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc827c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc677c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc677c:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc647d:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc647c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc647c:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc627c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc627c:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc547g:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc547e_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc547e:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc547d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc547d:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

OR	cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::-:::
	cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::pro:::

cpe:2.3:h:siemens:simatic_ipc477d:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_field_pg_m3:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_field_pg_m4:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc627d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc627d:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc677d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc677d:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc427d:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:siemens:simotion_p320-4_s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simotion_p320-4_s:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:*:*:*:*:*:*:*

Configuration 40 (hide)

OR	cpe:2.3:o:intel:active_management_technology_firmware:6.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:6.1:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:6.2:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:7.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:7.1:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:8.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:8.1:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:9.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:9.1:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:9.5:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:10.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:11.0:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:11.5:::::::*
	cpe:2.3:o:intel:active_management_technology_firmware:11.6:::::::*

History

17 Apr 2025, 18:31

Type	Values Removed	Values Added
First Time		Siemens simatic Ipc627d Firmware Siemens simatic Field Pg M4 Firmware Siemens simatic Ipc827c Firmware Siemens simatic Itp1000 Siemens simatic Ipc847d Siemens simatic Pcs 7 Ipc847c Siemens simatic Ipc847d Firmware Siemens simatic Pcs 7 Ipc847d Firmware Siemens simatic Pcs 7 Ipc647c Firmware Siemens simotion P320-4 S Siemens simatic Pcs 7 Ipc647d Firmware Siemens simatic Ipc847c Firmware Siemens simatic Ipc427e Hpe Siemens simatic Ipc647d Firmware Siemens simatic Pcs 7 Ipc677c Firmware Siemens simatic Ipc427e Firmware Siemens simatic Ipc827d Siemens simotion P320-4 S Firmware Siemens simatic Pcs 7 Ipc647c Siemens simatic Field Pg M5 Firmware Siemens simatic Field Pg M5 Siemens simatic Pcs 7 Ipc547d Siemens simatic Field Pg M3 Firmware Siemens simatic Ipc627d Siemens sinumerik Pcu50.5-p Firmware Siemens simatic Pcs 7 Ipc547e Siemens simatic Pcs 7 Ipc847d Siemens simatic Ipc547d Siemens simatic Ipc847c Siemens simatic Ipc477e Siemens simatic Ipc547g Siemens simatic Ipc827d Firmware Siemens simatic Pcs 7 Ipc477d Firmware Siemens simatic Ipc477e Firmware Siemens simatic Itp1000 Firmware Siemens simatic Pcs 7 Ipc677c Siemens simatic Ipc627c Siemens simatic Ipc627c Firmware Siemens simatic Ipc477d Firmware Siemens simatic Ipc547g Firmware Siemens simatic Ipc827c Siemens simatic Ipc677d Firmware Hpe proliant Ml10 Gen9 Server Firmware Siemens simatic Ipc477d Siemens simatic Pcs 7 Ipc627c Siemens simatic Ipc647c Siemens simatic Pcs 7 Ipc547g Siemens simatic Ipc547e Siemens simatic Pcs 7 Ipc547e Firmware Siemens simatic Ipc647d Siemens simatic Pcs 7 Ipc477d Siemens simatic Ipc547d Firmware Siemens simatic Pcs 7 Ipc647d Siemens simatic Pcs 7 Ipc547d Firmware Siemens simatic Ipc677c Siemens simatic Ipc677c Firmware Hpe proliant Ml10 Gen9 Server Siemens simatic Ipc647c Firmware Siemens simatic Pcs 7 Ipc847c Firmware Siemens Siemens simatic Ipc427d Siemens simatic Ipc677d Siemens sinumerik Pcu 50.5-p Siemens simatic Pcs 7 Ipc427e Firmware Siemens simatic Pcs 7 Ipc427e Siemens simatic Field Pg M4 Siemens simatic Ipc427d Firmware Siemens simatic Ipc547e Firmware Siemens simatic Pcs 7 Ipc627c Firmware Siemens simatic Pcs 7 Ipc547g Firmware Siemens simatic Field Pg M3
CPE		cpe:2.3:h:hpe:proliant_ml10_gen9_server:-:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc547d_firmware:::::::: cpe:2.3:h:siemens:simatic_pcs_7_ipc547d:-:::::::* cpe:2.3:o:siemens:simatic_ipc477e_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc827c_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc847c:-:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc477e:-:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc547g_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc847d_firmware:::::::: cpe:2.3:h:siemens:simatic_pcs_7_ipc547g:-:::::::* cpe:2.3:o:siemens:simatic_ipc677c_firmware:::::::: cpe:2.3:o:siemens:simatic_pcs_7_ipc427e_firmware:-:::::::* cpe:2.3:h:siemens:simotion_p320-4_s:-:::::::* cpe:2.3:h:siemens:simatic_itp1000:-:::::::* cpe:2.3:h:siemens:simatic_ipc547g:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc647d:-:::::::* cpe:2.3:o:siemens:sinumerik_pcu50.5-p_firmware:::::::: cpe:2.3:h:siemens:simatic_pcs_7_ipc477d:-:::::::* cpe:2.3:o:siemens:simatic_ipc647c_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc827d:-:::::::* cpe:2.3:o:siemens:simatic_ipc427d_firmware:-:::::::* cpe:2.3:h:siemens:simatic_ipc847d:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc677c:-:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc847c_firmware:::::::: cpe:2.3:o:siemens:simatic_pcs_7_ipc847d_firmware:::::::: cpe:2.3:o:siemens:simatic_pcs_7_ipc547e_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc677c:-:::::::* cpe:2.3:o:siemens:simatic_ipc647d_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::pro::: cpe:2.3:o:siemens:simatic_pcs_7_ipc647c_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc547d_firmware:::::::: cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc547g_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc627d_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc547d:-:::::::* cpe:2.3:h:siemens:simatic_ipc627c:-:::::::* cpe:2.3:h:siemens:simatic_ipc627d:-:::::::* cpe:2.3:o:siemens:simatic_itp1000_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc827c:-:::::::* cpe:2.3:h:siemens:simatic_ipc647c:-:::::::* cpe:2.3:h:siemens:simatic_field_pg_m4:-:::::::* cpe:2.3:o:siemens:simatic_ipc827d_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc647d:-:::::::* cpe:2.3:o:siemens:simatic_ipc677d_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc677d:-:::::::* cpe:2.3:h:siemens:sinumerik_pcu_50.5-p:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc847d:-:::::::* cpe:2.3:h:siemens:simatic_ipc427e:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc427e:-:::::::* cpe:2.3:o:siemens:simatic_ipc847c_firmware:::::::: cpe:2.3:o:hpe:proliant_ml10_gen9_server_firmware:5.0:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc477d_firmware:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc647c:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc547e:-:::::::* cpe:2.3:o:siemens:simatic_pcs_7_ipc677c_firmware:::::::: cpe:2.3:o:siemens:simotion_p320-4_s_firmware:::::::: cpe:2.3:h:siemens:simatic_field_pg_m3:-:::::::* cpe:2.3:o:siemens:simatic_field_pg_m4_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc547e:-:::::::* cpe:2.3:o:siemens:simatic_ipc427e_firmware:::::::: cpe:2.3:h:siemens:simatic_ipc427d:-:::::::* cpe:2.3:h:siemens:simatic_ipc477d:-:::::::* cpe:2.3:o:siemens:simatic_ipc477d_firmware:-::::-::: cpe:2.3:o:siemens:simatic_pcs_7_ipc627c_firmware:::::::: cpe:2.3:h:siemens:simatic_pcs_7_ipc847c:-:::::::* cpe:2.3:o:siemens:simatic_ipc547e_firmware:::::::: cpe:2.3:o:siemens:simatic_pcs_7_ipc647d_firmware:::::::: cpe:2.3:o:siemens:simatic_field_pg_m3_firmware:::::::: cpe:2.3:o:siemens:simatic_ipc627c_firmware:::::::: cpe:2.3:h:siemens:simatic_field_pg_m5:-:::::::* cpe:2.3:h:siemens:simatic_pcs_7_ipc627c:-:::::::*
References	~~() http://www.securityfocus.com/bid/98269 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/98269 - Third Party Advisory, VDB Entry, Broken Link
References	~~() http://www.securitytracker.com/id/1038385 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1038385 - Third Party Advisory, VDB Entry, Broken Link
References	~~() https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf - Exploit, Technical Description, Third Party Advisory~~	() https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf - Exploit, Technical Description, Third Party Advisory, Broken Link
References	~~() https://www.embedi.com/news/mythbusters-cve-2017-5689 - Third Party Advisory~~	() https://www.embedi.com/news/mythbusters-cve-2017-5689 - Third Party Advisory, Broken Link

07 Feb 2025, 14:15

Type	Values Removed	Values Added
CWE		CWE-269

21 Nov 2024, 03:28

Type	Values Removed	Values Added
References	~~() http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Third Party Advisory~~	() http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - Patch, Third Party Advisory
References	~~() http://www.securityfocus.com/bid/98269 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/98269 - Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1038385 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1038385 - Third Party Advisory, VDB Entry
References	~~() https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf - Third Party Advisory~~	() https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf - Third Party Advisory
References	~~() https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf - Broken Link~~	() https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf - Broken Link
References	~~() https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us - Third Party Advisory~~	() https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us - Third Party Advisory
References	~~() https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr - Patch, Vendor Advisory~~	() https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr - Patch, Vendor Advisory
References	~~() https://security.netapp.com/advisory/ntap-20170509-0001/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20170509-0001/ - Third Party Advisory
References	~~() https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf - Exploit, Technical Description, Third Party Advisory~~	() https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf - Exploit, Technical Description, Third Party Advisory
References	~~() https://www.embedi.com/news/mythbusters-cve-2017-5689 - Third Party Advisory~~	() https://www.embedi.com/news/mythbusters-cve-2017-5689 - Third Party Advisory
References	~~() https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability - Technical Description, Third Party Advisory~~	() https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability - Technical Description, Third Party Advisory

Information

Published : 2017-05-02 14:59

Updated : 2025-04-20 01:37

NVD link : CVE-2017-5689

Mitre link : CVE-2017-5689

CVE.ORG link : CVE-2017-5689

JSON object : View

Products Affected

siemens

sinumerik_pcu50.5-p_firmware
simatic_ipc847d
simatic_pcs_7_ipc627c
simatic_ipc647d
simatic_ipc477d
simatic_pcs_7_ipc847d_firmware
simatic_pcs_7_ipc477d_firmware
simatic_ipc677d
simatic_ipc547e
simatic_ipc847c
simatic_ipc847c_firmware
simatic_ipc827d_firmware
simatic_pcs_7_ipc547d_firmware
simatic_field_pg_m5
simatic_pcs_7_ipc547e_firmware
simatic_ipc547g
simatic_field_pg_m3
simatic_ipc427e
simatic_pcs_7_ipc677c_firmware
simatic_ipc477e
simatic_pcs_7_ipc427e_firmware
simotion_p320-4_s_firmware
simatic_ipc427d
simatic_pcs_7_ipc547e
simatic_pcs_7_ipc427e
simatic_pcs_7_ipc647d_firmware
simatic_ipc647c_firmware
simatic_itp1000_firmware
simatic_ipc547d_firmware
simatic_ipc547d
simatic_ipc547g_firmware
simatic_pcs_7_ipc677c
simatic_pcs_7_ipc647c
simatic_field_pg_m3_firmware
simatic_ipc647d_firmware
simotion_p320-4_s
simatic_field_pg_m5_firmware
simatic_ipc827d
simatic_field_pg_m4
simatic_ipc427d_firmware
simatic_pcs_7_ipc847c_firmware
simatic_pcs_7_ipc547g
simatic_ipc477d_firmware
simatic_pcs_7_ipc647d
simatic_ipc427e_firmware
simatic_field_pg_m4_firmware
simatic_ipc627c
simatic_ipc847d_firmware
simatic_ipc827c_firmware
simatic_pcs_7_ipc547g_firmware
simatic_pcs_7_ipc547d
simatic_pcs_7_ipc477d
simatic_ipc677c_firmware
simatic_ipc627d_firmware
simatic_ipc547e_firmware
simatic_pcs_7_ipc847c
simatic_itp1000
sinumerik_pcu_50.5-p
simatic_ipc827c
simatic_ipc647c
simatic_ipc677d_firmware
simatic_ipc627d
simatic_ipc477e_firmware
simatic_pcs_7_ipc847d
simatic_ipc627c_firmware
simatic_ipc677c
simatic_pcs_7_ipc627c_firmware
simatic_pcs_7_ipc647c_firmware

intel

active_management_technology_firmware

hpe

proliant_ml10_gen9_server_firmware
proliant_ml10_gen9_server

CWE

NVD-CWE-noinfo CWE-269

Improper Privilege Management

9.8 /10