PT-2017-16678 · Intel · Intel Active Management Technology+2

Published 2017-09-05 · Updated 2023-08-17 · CVE-2017-5698

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.6.x.1xxx

Description The issue allows a local user with administrative privileges to upgrade to a vulnerable firmware version. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000, avoid upgrading to firmware version 11.6.x.1xxx until a patch is available. For Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.6.x.1xxx, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-5698

Affected Products

Intel Active Management Technology

Intel Small Business Technology

Intel Standard Manageability

References · 5

• https://osv.dev/vulnerability/CVE-2017-5698 · Vendor Advisory
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-fr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5698 · Security Note
• https://twitter.com/geekphane/status/1692244091705196755 · Twitter Post
• https://t.me/cvenotify/56787 · Telegram Post