9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Affected (51)
Products: Hpe: Proliant Ml10 Gen9 Server Firmware · Siemens: Simatic Itp1000 Firmware, Simatic Ipc847d Firmware, Simatic Ipc847c Firmware, Simatic Ipc827d Firmware, Simatic Ipc827c Firmware, Simatic Ipc677c Firmware, Simatic Ipc647d Firmware, Simatic Ipc647c Firmware, Simatic Ipc627c Firmware, Simatic Ipc547g Firmware, Simatic Ipc547e Firmware, Simatic Ipc547d Firmware, Simatic Ipc477e Firmware, Simatic Ipc477d Firmware, Simatic Field Pg M3 Firmware, Simatic Field Pg M4 Firmware, Simatic Field Pg M5 Firmware, Simatic Ipc627d Firmware, Simatic Ipc677d Firmware, Simatic Pcs 7 Ipc427e Firmware, Simatic Pcs 7 Ipc547d Firmware, Simatic Pcs 7 Ipc547e Firmware, Simatic Pcs 7 Ipc627c Firmware, Simatic Pcs 7 Ipc677c Firmware, Simatic Pcs 7 Ipc647c Firmware, Simatic Pcs 7 Ipc647d Firmware, Simatic Pcs 7 Ipc847c Firmware, Simatic Pcs 7 Ipc847d Firmware, Simatic Pcs 7 Ipc547g Firmware, Simatic Pcs 7 Ipc477d Firmware, Simatic Ipc427d Firmware, Simatic Ipc427e Firmware, Simotion P320 4 S Firmware, Sinumerik Pcu50.5 P Firmware · Intel: Active Management Technology Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0 |
| Running on/with | Platform Versions |
|---|---|
Hpe Proliant Ml10 Gen9 Server | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Itp1000 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc847d | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc847c | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc827d | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc827c | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc677c | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc647d | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc647c | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc627c | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.0.26.3000 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc547g | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc547e | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 7.1.91.3272 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc547d | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 21.01.05 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc477e | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc477d | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Field Pg M3 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18.01.06 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Field Pg M4 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 22.01.03 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Field Pg M5 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc627d | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc677d | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 21.01.04 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 7.1.91.3272 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc547d | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc547e | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc627c | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc677c | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc647c | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc647d | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc847c | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 9.1.41.3024 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc847d | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc427e | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.0.26.3000 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc547g | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Ipc477d | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc427d | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 21.01.05 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Ipc427e | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 17.02.06.83.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simotion P320 4 S | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.2.61.3535 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinumerik Pcu 50.5 P | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
References (23)
Source: secure@intel.com
PatchThird Party Advisory
Source: secure@intel.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@intel.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Broken Link
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
PatchVendor Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Broken LinkExploitTechnical DescriptionThird Party Advisory
Source: secure@intel.com
Broken LinkThird Party Advisory
Source: secure@intel.com
Technical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Technical DescriptionThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Timeline
No history available yet.