CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-5697
https://notcve.org/view.php?id=CVE-2017-5697
14 Jun 2017 — Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page. Protección insuficiente contra el secuestro de la acción click en la Interfaz de usuario web de Intel AMT versiones de firmware anteriores a 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205 y 11.6.25.1129, que potencialmente permiten a un ... • https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00081&languageid=en-fr • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 10.0EPSS: 94%CPEs: 14EXPL: 9CVE-2017-5689 – Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2017-5689
02 May 2017 — An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). Un atacante de red sin privilegios podría alcanzar p... • https://packetstorm.news/files/id/181118 • CWE-269: Improper Privilege Management •