Synology-SA-17:12 Intel Manageability SKUs

Abstract

There is an escalation of privilege vulnerability in Intel manageability firmware that can allow an unprivileged attacker to take full control of the device.

All Synology products are not affected because the manageability feature is disabled by default.

Severity

Not affected

Description

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM).

An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5689
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
https://mjg59.dreamwidth.org/48429.html