Intel AMT affected Firewall Ports Status
| 0 Votes |
Description
This analysis checks whether there are active Firewall Rules that currently block the ports affected by the AMT vulnerability
Per Intel, the affected ports are:
- 623
- 664
- 16992
- 16993
- 16994
- 16995
Property Details
| 2998553 | |
| Alpha - Code that was just developed | |
| Intel AMT affected Firewall Ports Status | |
| BESC | |
| CVE-2017-5689, Intel AMT bug, Intel AMT vulnerability, block ports, firewall | |
| mxc0bbn on 5/10/2017 6:16:35 PM | |
| mxc0bbn on 5/10/2017 6:16:35 PM | |
| 4026 Views / 9 Downloads | |
* Average over 0 ratings.
** Log In or Register to add your rating.
|
Properties
Port 623
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=623" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Port 664
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=664" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Port 16992
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=16992" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Port 16993
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=16993" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Port 16994
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=16994" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Port 16995
Period
Every Report
| * Results in a true/false |
if exists (values of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" of registry) whose (it as string contains "RPort=16995" and it as string contains "Action=Block" and it as string contains "Active=TRUE") then "Blocked" else "*** WARNING-PORT IS OPEN***"
Relevance
name of operating system contains "Win"
/* Version of Windows must be at least Win7 */ version of operating system >= "6.1"
Sharing
| Social Media: |
