CVE-2017-5689
CRITICAL KEV NUCLEIIntel AMT Digest Authentication Bypass Scanner
Title source: metasploitExploitation Summary
CVE-2017-5689 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 28, 2022.
EIP tracks 9 public exploits from researchers including nixawk, qazbnm456, embedi, including a Metasploit module auxiliary/scanner/http/intel_amt_digest_bypass.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Intel AMT by manipulating the WWW-Authenticate header to gain unauthorized access to the web interface or WS-Management service. It sends crafted HTTP requests with modified Digest authentication headers to bypass authentication and achieve a 200 OK response.
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
Exploits (9)
This exploit demonstrates an authentication bypass vulnerability in Intel AMT by manipulating the WWW-Authenticate header to gain unauthorized access to the web interface or WS-Management service. It sends crafted HTTP requests with modified Digest authentication headers to bypass authentication and achieve a 200 OK response.
The repository contains a functional Python PoC for CVE-2017-5689, an authentication bypass vulnerability in Intel AMT. The script exploits a flaw in the Digest Authentication mechanism by crafting a malicious Authorization header to bypass authentication and gain unauthorized access.
This PoC demonstrates an authentication bypass in Intel AMT by manipulating the Authorization header in HTTP requests. It uses a mitmproxy script to blank the 'response' field in the Authorization header, exploiting CVE-2017-5689.
This repository contains a detection script for CVE-2017-5689, which scans for vulnerable Intel Active Management Technology (AMT) versions. The script checks for specific server banners and versions that are known to be vulnerable.
The repository contains a functional Python PoC for CVE-2017-5689, an authentication bypass vulnerability in Intel AMT. The script exploits a flaw in the Digest Authentication mechanism by crafting a malicious Authorization header to gain unauthorized access.
This PoC exploits CVE-2017-5689, an authentication bypass vulnerability in Intel AMT. It crafts a malicious Digest authentication header to bypass authentication and gain unauthorized access to the AMT web interface.
This repository contains a honeypot implementation for CVE-2017-5689, an authentication bypass vulnerability in Intel AMT firmware. The server emulates Intel AMT behavior on port 16992, logging requests and mimicking the vulnerable authentication mechanism.
This repository contains a Python script that checks for and exploits CVE-2017-5689, an authentication bypass vulnerability in Intel AMT. The script sends a crafted WWW-Authenticate header to bypass authentication and verify vulnerability.
This Metasploit module exploits CVE-2017-5689, an authentication bypass in Intel AMT by sending a blank HTTP digest response. It scans for vulnerable endpoints and confirms exploitation by retrieving system information.
Nuclei Templates (1)
title:"Active Management Technology" || http.title:"active management technology"
title="active management technology"
References (12)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H