Critical 9.8Known exploited (CISA KEV)Published May 2, 2017

CVE-2017-5689An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM).

Updated under an hour ago (2026-10-19 06:10 UTC)

Does this affect you?

It affects Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability and 36 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Jan 28, 2022; federal agencies had to remediate by Jul 28, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability

Exploited in the last 30 days

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

CVSS: 9.8 CRITICAL (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-269
Known exploited: Added to CISA KEV Jan 28, 2022; federal remediation due Jul 28, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 92.19% (percentile 100)
Assigned by: intel
NVD analysis: Analyzed
Record last updated: Oct 21, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Intel Corporation Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability intel:active_mangement_technology_intel_small_business_technology_intel_standard_manageability (from the name)	fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later	CNA record
hpe proliant_ml10_gen9_server_firmware hpe:proliant_ml10_gen9_server_firmware	5.0	NVD
siemens simatic_itp1000_firmware siemens:simatic_itp1000_firmware	before 9.1.41.3024	NVD
siemens simatic_ipc847d_firmware siemens:simatic_ipc847d_firmware	before 9.1.41.3024	NVD
siemens simatic_ipc847c_firmware siemens:simatic_ipc847c_firmware	before 6.2.61.3535	NVD
siemens simatic_ipc827d_firmware siemens:simatic_ipc827d_firmware	before 9.1.41.3024	NVD
siemens simatic_ipc827c_firmware siemens:simatic_ipc827c_firmware	before 6.2.61.3535	NVD
siemens simatic_ipc677d_firmware siemens:simatic_ipc677d_firmware	before 9.1.41.3024; before 9.1.41.3024	NVD
siemens simatic_ipc677c_firmware siemens:simatic_ipc677c_firmware	before 6.2.61.3535	NVD
siemens simatic_ipc647d_firmware siemens:simatic_ipc647d_firmware	before 9.1.41.3024	NVD
siemens simatic_ipc647c_firmware siemens:simatic_ipc647c_firmware	before 6.2.61.3535	NVD
siemens simatic_ipc627d_firmware siemens:simatic_ipc627d_firmware	before 9.1.41.3024; before 9.1.41.3024	NVD
siemens simatic_ipc627c_firmware siemens:simatic_ipc627c_firmware	before 6.2.61.3535	NVD
siemens simatic_ipc547g_firmware siemens:simatic_ipc547g_firmware	before 11.0.26.3000	NVD
siemens simatic_ipc547e_firmware siemens:simatic_ipc547e_firmware	before 9.1.41.3024	NVD
siemens simatic_ipc547d_firmware siemens:simatic_ipc547d_firmware	before 7.1.91.3272	NVD
siemens simatic_ipc477e_firmware siemens:simatic_ipc477e_firmware	before 21.01.05	NVD
siemens simatic_ipc477d_firmware siemens:simatic_ipc477d_firmware	all versions; all versions	NVD
siemens simatic_field_pg_m3_firmware siemens:simatic_field_pg_m3_firmware	before 6.2.61.3535	NVD
siemens simatic_field_pg_m4_firmware siemens:simatic_field_pg_m4_firmware	before 18.01.06	NVD
siemens simatic_field_pg_m5_firmware siemens:simatic_field_pg_m5_firmware	before 22.01.03	NVD
siemens simatic_pcs_7_ipc427e_firmware siemens:simatic_pcs_7_ipc427e_firmware	before 21.01.04; all versions	NVD
siemens simatic_pcs_7_ipc547d_firmware siemens:simatic_pcs_7_ipc547d_firmware	before 7.1.91.3272	NVD
siemens simatic_pcs_7_ipc547e_firmware siemens:simatic_pcs_7_ipc547e_firmware	before 9.1.41.3024	NVD
siemens simatic_pcs_7_ipc547g_firmware siemens:simatic_pcs_7_ipc547g_firmware	before 11.0.26.3000; before 11.0.26.3000	NVD
siemens simatic_pcs_7_ipc627c_firmware siemens:simatic_pcs_7_ipc627c_firmware	before 6.2.61.3535	NVD
siemens simatic_pcs_7_ipc677c_firmware siemens:simatic_pcs_7_ipc677c_firmware	before 6.2.61.3535	NVD
siemens simatic_pcs_7_ipc647c_firmware siemens:simatic_pcs_7_ipc647c_firmware	before 6.2.61.3535	NVD
siemens simatic_pcs_7_ipc647d_firmware siemens:simatic_pcs_7_ipc647d_firmware	before 9.1.41.3024	NVD
siemens simatic_pcs_7_ipc847c_firmware siemens:simatic_pcs_7_ipc847c_firmware	before 6.2.61.3535	NVD
siemens simatic_pcs_7_ipc847d_firmware siemens:simatic_pcs_7_ipc847d_firmware	before 9.1.41.3024	NVD
siemens simatic_pcs_7_ipc477d_firmware siemens:simatic_pcs_7_ipc477d_firmware	all versions	NVD
siemens simatic_ipc427d_firmware siemens:simatic_ipc427d_firmware	all versions	NVD
siemens simatic_ipc427e_firmware siemens:simatic_ipc427e_firmware	before 21.01.05	NVD
siemens simotion_p320-4_s_firmware siemens:simotion_p320-4_s_firmware	before 17.02.06.83.1	NVD
siemens sinumerik_pcu50.5-p_firmware siemens:sinumerik_pcu50.5-p_firmware	before 6.2.61.3535	NVD
intel active_management_technology_firmware intel:active_management_technology_firmware	6.0; 6.1; 6.2; 7.0; 7.1; 8.0; 8.1; 9.0; and 6 more ranges	NVD

References

https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerabilityx-refsource-misc, technical-description, third-party-advisory
https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdfx-refsource-confirm, broken-link
http://www.securityfocus.com/bid/98269vdb-entry, x-refsource-bid, broken-link, third-party-advisory
http://www.securitytracker.com/id/1038385vdb-entry, x-refsource-sectrack, broken-link, third-party-advisory
https://security.netapp.com/advisory/ntap-20170509-0001/x-refsource-confirm, third-party-advisory
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdfx-refsource-misc, broken-link, exploit, technical-description, third-party-advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-frx-refsource-confirm, patch, vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_usx-refsource-confirm, third-party-advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlx-refsource-confirm, patch, third-party-advisory
https://www.embedi.com/news/mythbusters-cve-2017-5689x-refsource-misc, broken-link, third-party-advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdfx-refsource-confirm, third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5689us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.