CVE-2017-5689
02.05.2017, 14:59
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).Enginsight
| Vendor | Product | Version |
|---|---|---|
| hpe | proliant_ml10_gen9_server_firmware | 5.0 |
| siemens | simatic_itp1000_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc847d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc847c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_ipc827d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc827c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_ipc677d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc677c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_ipc647d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc647c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_ipc627d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc627c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_ipc547g_firmware | 𝑥 < 11.0.26.3000 |
| siemens | simatic_ipc547e_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc547d_firmware | 𝑥 < 7.1.91.3272 |
| siemens | simatic_ipc477e_firmware | 𝑥 < 21.01.05 |
| siemens | simatic_ipc477d_firmware | - |
| siemens | simatic_ipc477d_firmware | - |
| siemens | simatic_field_pg_m3_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_field_pg_m4_firmware | 𝑥 < 18.01.06 |
| siemens | simatic_field_pg_m5_firmware | 𝑥 < 22.01.03 |
| siemens | simatic_ipc627d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_ipc677d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_pcs_7_ipc427e_firmware | 𝑥 < 21.01.04 |
| siemens | simatic_pcs_7_ipc547d_firmware | 𝑥 < 7.1.91.3272 |
| siemens | simatic_pcs_7_ipc547e_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_pcs_7_ipc547g_firmware | 𝑥 < 11.0.26.3000 |
| siemens | simatic_pcs_7_ipc627c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_pcs_7_ipc677c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_pcs_7_ipc647c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_pcs_7_ipc647d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_pcs_7_ipc847c_firmware | 𝑥 < 6.2.61.3535 |
| siemens | simatic_pcs_7_ipc847d_firmware | 𝑥 < 9.1.41.3024 |
| siemens | simatic_pcs_7_ipc427e_firmware | - |
| siemens | simatic_pcs_7_ipc547g_firmware | 𝑥 < 11.0.26.3000 |
| siemens | simatic_pcs_7_ipc477d_firmware | - |
| siemens | simatic_ipc427d_firmware | - |
| siemens | simatic_ipc427e_firmware | 𝑥 < 21.01.05 |
| siemens | simotion_p320-4_s_firmware | 𝑥 < 17.02.06.83.1 |
| siemens | sinumerik_pcu50.5-p_firmware | 𝑥 < 6.2.61.3535 |
| intel | active_management_technology_firmware | 6.0 |
| intel | active_management_technology_firmware | 6.1 |
| intel | active_management_technology_firmware | 6.2 |
| intel | active_management_technology_firmware | 7.0 |
| intel | active_management_technology_firmware | 7.1 |
| intel | active_management_technology_firmware | 8.0 |
| intel | active_management_technology_firmware | 8.1 |
| intel | active_management_technology_firmware | 9.0 |
| intel | active_management_technology_firmware | 9.1 |
| intel | active_management_technology_firmware | 9.5 |
| intel | active_management_technology_firmware | 10.0 |
| intel | active_management_technology_firmware | 11.0 |
| intel | active_management_technology_firmware | 11.5 |
| intel | active_management_technology_firmware | 11.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References