PT-2017-3134 · Intel · Active Management Technology+2

Published 2017-11-20 · Updated 2017-11-20 · CVE-2017-5713

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Management Engine (ME) and Active Management Technology (AMT) (affected versions not specified)

Description The issue is caused by a buffer overflow in the Active Management Technology (AMT) and Intel Management Engine (ME) firmware of the Platform Controller Hub (PCH) chipsets. This could allow a remote attacker with administrator privileges to execute arbitrary code with AMT privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-02534

CVE-2017-5713

Affected Products

Active Management Technology

Intel Management Engine

Platform Controller Hub

References · 5

• https://bdu.fstec.ru/vul/2017-02534 · Security Note
• http://securityfocus.com/bid/101920 · Note
• https://security.netapp.com/advisory/ntap-20171120-0001 · Note
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr · Note
• http://securitytracker.com/id/1039852 · Note