{"id":"CVE-2017-5689","published":"2017-05-02T14:59:00Z","modified":"2026-06-17T01:21:02Z","title":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege…","vendor":"Intel","product":"Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","tier":"core","eol":null,"description":{"text":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).","provenance":"source","from":"NVD"},"summary":{"text":"A privilege management flaw in Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability (ISM) manageability SKUs allows attackers to gain elevated system privileges on affected provisioned systems. An unprivileged attacker can exploit it remotely over the network without authentication or user interaction, and an unprivileged local attacker with access to the system can likewise exploit it by provisioning the manageability features.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:09:43Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.92189,"percentile":0.99821,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-01-28","dueDate":"2022-07-28","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5689","provenance":"source"},"vulncheckKev":{"dateAdded":"2021-08-17","exploitedFirstSeen":"2021-08-17","ransomware":false,"evidence":[{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-01-28"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-269","name":"Improper Privilege Management"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/98269","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038385","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf","tags":["Third Party Advisory"]},{"url":"https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us","tags":["Third Party Advisory"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20170509-0001/","tags":["Third Party Advisory"]},{"url":"https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf","tags":["Broken Link","Exploit","Technical Description","Third Party Advisory"]},{"url":"https://www.embedi.com/news/mythbusters-cve-2017-5689","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability","tags":["Technical Description","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/98269","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038385","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf","tags":["Third Party Advisory"]},{"url":"https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us","tags":["Third Party Advisory"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20170509-0001/","tags":["Third Party Advisory"]},{"url":"https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf","tags":["Broken Link","Exploit","Technical Description","Third Party Advisory"]},{"url":"https://www.embedi.com/news/mythbusters-cve-2017-5689","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability","tags":["Technical Description","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Network attacker exploits exposed manageability service remotely","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs","start":0,"end":101}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Gains system privileges via improper privilege management","mappingType":"primary_impact","evidence":[{"from":"description","quote":"could gain system privileges to provisioned Intel manageability SKUs","start":33,"end":101}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-14766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14766","exploited":true,"exploitedSince":"2022-01-28","provenance":"source"},"exploits":[{"id":43385,"url":"https://www.exploit-db.com/exploits/43385","title":"Intel Active Management Technology - System Privileges","type":"remote","platform":"multiple","date":"2017-05-10","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2017-05-10"},"pocGithub":{"count":5,"skipped":1,"earliest":"2017-05-04","earliestUrl":"https://github.com/CerberusSecurity/CVE-2017-5689","repos":[{"name":"embedi/amt_auth_bypass_poc","url":"https://github.com/embedi/amt_auth_bypass_poc","stars":55,"created":"2017-07-27"},{"name":"CerberusSecurity/CVE-2017-5689","url":"https://github.com/CerberusSecurity/CVE-2017-5689","stars":39,"created":"2017-05-04"},{"name":"Bijaye/intel_amt_bypass","url":"https://github.com/Bijaye/intel_amt_bypass","stars":3,"created":"2017-05-09"},{"name":"MlSebrell/amthoneypot","url":"https://github.com/MlSebrell/amthoneypot","stars":1,"created":"2017-05-12"},{"name":"aix567/C-A-S","url":"https://github.com/aix567/C-A-S","stars":0,"created":"2026-10-25"}]},"metasploit":[{"name":"Intel AMT Digest Authentication Bypass Scanner","module":"auxiliary/scanner/http/intel_amt_digest_bypass","type":"auxiliary","disclosureDate":"2017-05-05","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/intel_amt_digest_bypass.rb"}],"nuclei":[{"id":"CVE-2017-5689","name":"Intel Active Management - Authentication Bypass","severity":"critical","path":"http/cves/2017/CVE-2017-5689.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5689.yaml"}],"first":{"date":"2017-05-04","source":"PoC-in-GitHub","url":"https://github.com/CerberusSecurity/CVE-2017-5689"},"provenance":"source"},"exploitRefs":["https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf"],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1068"],"provenance":"ai"}],"timeline":[{"date":"2017-05-02","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5689","provenance":"source"},{"date":"2017-05-04","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2017-05-05, Exploit-DB 2017-05-10","url":"https://github.com/CerberusSecurity/CVE-2017-5689","provenance":"source"},{"date":"2021-08-17","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","provenance":"source"},{"date":"2022-01-28","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-01-28","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14766","provenance":"source"}],"speed":{"daysToPublicExploit":2,"firstExploitFrom":"PoC-in-GitHub","daysToKev":1732},"priority":{"score":69.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1899 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.96,"detail":"percentile 0.9982"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 5 PoC-in-GitHub repos; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}