HTTP: Intel Active Management Technology Remote Privilege Escalation

This signature detects attempts to exploit a known vulnerability in Intel Active Management Technology (AMT) and the Intel Standard Manageability (ISM) and Intel Small Business Technology (SBT) variants. Successful exploitation allows an unprivileged attacker to gain administrative privileges over the management component of the target system.

Extended Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

Affected Products

Intel active_management_technology_firmware

References

CVE: CVE-2017-5689

Short Name

HTTP:INTEL-AMT-PE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Intel Active Management Technology Remote Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?