TCP 16993
Synopsis
- TCP port 16993 is used by Intel Active Management Technology (AMT) for its secure (TLS) web interface and WS-Management (WS-MAN/SOAP) endpoints on Intel vPro-enabled systems.
- Real software that connects to 16993 includes Intel MeshCommander/Manageability Commander, Intel Endpoint Management Assistant (EMA) and Intel Setup and Configuration Software (SCS) for provisioning and control.
- Microsoft System Center Configuration Manager (SCCM) Out of Band Management (now deprecated) used 16993 to manage AMT clients.
- OEM tools such as Dell Command with Intel vPro extensions and HP/Lenovo AMT management plug-ins also use 16993 for secure AMT operations.
- Typical functions over 16993 include remote power control, hardware inventory, and initiating SOL/IDE-R/KVM redirection.
- This port/service has been abused in the wild, including the 2017 Intel AMT authentication-bypass vulnerability (CVE-2017-5689) and opportunistic attacks against internet-exposed AMT with weak or default credentials.
Observed activity
Last 30 days
Detailed chart