home / blog

2026-11-03 · critical

CVE-2017-5689: Privilege escalation in Intel AMT

Critical escalation in Intel AMT and ISM: unprivileged attackers gain system privileges. CVSS 9.8.

CVE-2017-5689: Privilege escalation in Intel AMT

CVE-2017-5689 describes a privilege escalation vulnerability in Intel manageability platforms: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). An unprivileged attacker can exploit this flaw remotely to acquire system privileges on affected Intel SKUs, gaining full platform control.

The vulnerability is rated critical with CVSS 9.8. Although published May 2, 2017, recent signals indicate the existence of public repositories claiming to contain working exploits for Intel ME versions 6.x through 11.6.x. This contemporary signal, despite the CVE's age, demonstrates the flaw remains an active area of interest.

For defenders: verify which version of Intel AMT, ISM, or SBT is present in enterprise systems. Consult official Intel documentation for patch and firmware update availability. Continuously monitor access logs to manageability features to detect anomalous behavior. Restrict unauthorized access to remote management interfaces at the network level.

At a glance

What
Privilege escalation vulnerability in Intel AMT, ISM and SBT
Severity
Critical (CVSS 9.8)
Affected versions
Intel ME versions 6.x through 11.6.x (confirmed by exploit signals)
Fix
Not reported in the official data provided
Status
Published May 2, 2017; contemporary public exploit signals detected
Action
Verify installed Intel AMT/ISM version; consult official Intel patches; monitor access logs to manageability features

Sources: NVD, CVE-2017-5689

← All articles