- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Does SonicWall block against CVE-2017-5689?
03/26/2020 
3 People found this article helpful
95,799 Views
Description
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
SonicWall can block against this attack by two IPS signatures:
-
IPS Signature ID: 12769 "Intel Active Management Technology Access 1"
-
IPS Signature ID: 12770 "Intel Active Management Technology Access 2"
Resolution
To confirm that your SonicWall is blocking these signatures please perform the following:
- Login to the SonicWall as an Administrator.
- Select Security Services | Intrusion Prevention.
- Use the Lookup Signature ID text box and search via the first signature 12769.
- Confirm that the signatures are using either Global values (that are enabled to Prevent) or individually select the signature to prevent.
|
IPS Signature ID: 12769 "Intel Active Management Technology Access 1" | IPS Signature ID: 12770 "Intel Active Management Technology Access 2" |
The following references were used while creating this solution:
- https://nvd.nist.gov/vuln/detail/CVE-2017-5689
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5689
Related Articles
- L2TP user to access the network across site to site vpn.
- Global VPN Client slowing down the internet speed
- App Control fails by schema error when editing VPN category
Categories
- Firewalls > SonicWall NSA Series > IPS/GAV/Spyware
- Firewalls > SonicWall SuperMassive 9000 Series > IPS/GAV/Spyware
- Firewalls > TZ Series > IPS/GAV/Spyware
YES
NO