Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.810996
Kategorie:Web application abuses
Titel:Intel Active Management Technology Privilege Escalation Vulnerability
Zusammenfassung:Intel system with Intel Active Management Technology enabled is prone to a privilege escalation vulnerability.
Beschreibung:Summary:
Intel system with Intel Active Management Technology enabled is prone to a privilege escalation vulnerability.

Vulnerability Insight:
The flaw exists due to mishandling of input
in an unknown function.

Vulnerability Impact:
Successful exploitation will allow an
unprivileged attacker to gain control of the manageability features provided
by these products.

Affected Software/OS:
Intel Active Management Technology
manageability firmware versions 6.x before 6.2.61.3535, 7.x before 7.1.91.3272,
8.x before 8.1.71.3608, 9.0.x and 9.1.x before 9.1.41.3024, 9.5.x before
9.5.61.3012, 10.x before 10.0.55.3000, 11.0.x before 11.0.25.3001, 11.5.x and
11.6.x before 11.6.27.3264.

Solution:
Upgrade to Intel Active Management Technology
manageability firmware versions 6.2.61.3535 or 7.1.91.3272 or 8.1.71.3608 or
9.1.41.3024 or 9.5.61.3012 or 10.0.55.3000 or 11.0.25.3001 or 11.6.27.3264 or later.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: BugTraq ID: 98269
Common Vulnerability Exposure (CVE) ID: CVE-2017-5689
http://www.securityfocus.com/bid/98269
https://www.embedi.com/files/white-papers/Silent-Bob-is-Silent.pdf
https://www.embedi.com/news/mythbusters-cve-2017-5689
https://www.tenable.com/blog/rediscovering-the-intel-amt-vulnerability
http://www.securitytracker.com/id/1038385
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.