Intel ME / AMD PSP exploit
Flaws in management co-processors grant invisible persistent control
categoryCryptographic, hardware and side-channel attacksseverityVery Highlabnot yet measured
Classification
17 values: 8 reviewed, 8 imported, 1 derived. What do these mean?
Exploitability
| Attack vector | Software vulnerabilities |
|---|---|
| Reach (CVSS) | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Attacker skill required | Medium |
| Resources required | Low |
| Likelihood / prevalence | Medium |
| Maturity | Legacy / declining |
Impact & scope
| Severity | Very High |
|---|---|
| Impact | AvailabilityConfidentialityIntegrity |
| Environment | Edge / IoTOn-premises |
| Target asset class | EndpointServer |
Detection & response
No linked mitigations or detections yet.
Framework references
- Primary source: https://foreshadowattack.eu/
- cve: CVE-2017-5689 (primary)
Evidence & sources
- ev-0001 (Cyber Attack Taxonomy) — Name, definition and Example/ID taken verbatim from the 'Cryptographic, hardware and side-channel attacks' table, line 596 of Cyber-Attack-Taxonomy.md
- ev-0002 (CISA Known Exploited Vulnerabilities Catalog) — CISA KEV lists CVE-2017-5689 as known-exploited (kev=1, ransomware=unknown); added 2022-01-28.
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
- ev-0003 (FIRST EPSS scores) — FIRST EPSS for CVE-2017-5689: epss=0.92189 percentile=0.99818 (score date 2026-09-18).
- ev-0004 (NVD CVE API 2.0) — NVD maps CVE-2017-5689 to weakness(es) CWE-269.