Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intel | Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability | fixed in versions 6.2.61.3535, 7.1.91.3272, 8.1.71.3608, 9.1.41.3024, 10.0.55.3000, 11.0.25.3001, and 11.6.27.3264 and later | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Intel AMT Digest Authentication Bypass Scanner
auxiliary/scanner/http/intel_amt_digest_bypass
Exploit-DB 1
- Intel Active Management Technology - System Privileges EDB-43385 · remote · May 10, 2017
GitHub 7 repositories
-
embedi/amt_auth_bypass_poc ★ 55 · Jul 27, 2017
CVE-2017-5689 Proof-of-Concept exploit
-
CerberusSecurity/CVE-2017-5689 ★ 39 · May 4, 2017
-
Bijaye/intel_amt_bypass ★ 3 · May 9, 2017
simple python poc for CVE-2017-5689
-
MlSebrell/amthoneypot ★ 1 · May 12, 2017
Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689
-
unitnikolai/intel-me-remote-exploit ★ 0 · Nov 3, 2026
Leveraging CVE-2017-5689 to remotely exploit Intel AMT / ME on versions 6.x through 11.6.x
-
aix567/C-A-S ★ 0 · Oct 25, 2026
C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan discovery, HTTP/WS-Management testing, batch scanning…
-
TheWay-hue/CVE-2017-5689-Checker ★ 0 · Jul 14, 2021
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Intel Active Management - Authentication Bypass http/cves/2017/CVE-2017-5689.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-17-180-01A ICSA-17-180-01A_Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A) CISA ICS & IT advisories · Jul 11, 2017
References
- https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
- https://downloadmirror.intel.com/26754/eng/INTEL-SA-00075%20Mitigation%20Guide-Rev%201.1.pdf
- 98269 vdb-entry
- 1038385 vdb-entry
- https://security.netapp.com/advisory/ntap-20170509-0001/
- https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03754en_us
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- https://www.embedi.com/news/mythbusters-cve-2017-5689
- https://cert-portal.siemens.com/productcert/pdf/ssa-874235.pdf