PT-2017-3134 · Intel · Active Management Technology+2

Publicado 2017-11-20 · Atualizado 2017-11-20 · CVE-2017-5713

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Management Engine (ME) and Active Management Technology (AMT) (affected versions not specified)

Description The issue is caused by a buffer overflow in the Active Management Technology (AMT) and Intel Management Engine (ME) firmware of the Platform Controller Hub (PCH) chipsets. This could allow a remote attacker with administrator privileges to execute arbitrary code with AMT privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-02534

CVE-2017-5713

Produtos afetados

Active Management Technology

Intel Management Engine

Platform Controller Hub

Referências · 5

• http://securityfocus.com/bid/101920 · Nota
• https://security.netapp.com/advisory/ntap-20171120-0001 · Nota
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr · Nota
• https://bdu.fstec.ru/vul/2017-02534 · Nota de Segurança
• http://securitytracker.com/id/1039852 · Nota