CVE:CVE-2017-5698
CNNVD:CNNVD-201709-120
Intel Management Engine（ME）是美国英特尔（Intel）公司的一个管理引擎，能够远程管理计算机。Intel Active Management Technology (AMT)、Intel Standard Manageability (ISM)和Intel Small Business Technology (SBT)都是其中的组件。
使用11.0.25.3001版本和11.0.26.3000版本固件的Intel AMT、ISM和SBT中存在安全漏洞。本地攻击者可利用该漏洞提升权限。
solution:Upgrade intel active_management_technology_firmware to a higher version than 11.0.25.3001,11.0.26.3000,and avoid the version 11.0.25.3001,11.0.26.3000; Upgrade intel manageability_engine_firmware to a higher version than 11.0.25.3001,11.0.26.3000,and avoid the version 11.0.25.3001,11.0.26.3000; Upgrade intel small_business_technology_firmware to a higher version than 11.0.25.3001,11.0.26.3000,and avoid the version 11.0.25.3001,11.0.26.3000