CVE-2017-5698: intel corporation intel active management technology, intel standard manageability, and intel small business technology
Vulnerability summary
CVE-2017-5698 is a medium (CVSS 4.9) vulnerability in intel corporation intel active management technology, intel standard manageability, and intel small business technology. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.5% of scored vulnerabilities.
Timeline
- 05-09-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Intel3 products
- active_management_technology_firmware11.0.25.3001 | 11.0.26.3000
- manageability_engine_firmware11.0.25.3001 | 11.0.26.3000
- small_business_technology_firmware11.0.25.3001 | 11.0.26.3000
Intel corporation1 product
- intel active management technology, intel standard manageability, and intel small business technologyversion 11.0.25.3001 and 11.0.26.3000
2 vendors · 4 products
References
1 links- security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00082&languageid=en-frX Refsource CONFIRMVendor Advisory