Intel Active Management Technology Firmware vulnerabilities
49 known vulnerabilities affecting intel/active_management_technology_firmware.
Total CVEs
49
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL9HIGH19MEDIUM21
Vulnerabilities
Page 1 of 3
CVE-2017-5689P1CRITICALCVSS 9.8KEVPoCv6.0v6.1+12 more2017-05-02
CVE-2017-5689 [CRITICAL] CWE-269 CVE-2017-5689: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKU
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active
nvd
CVE-2020-0594P3CRITICALCVSS 9.8≥ 11.0, < 11.8.77≥ 11.10, < 11.12.77+2 more2020-06-15
CVE-2020-0594 [CRITICAL] CWE-125 CVE-2020-0594: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2020-0595P3CRITICALCVSS 9.8≥ 11.0, < 11.8.77≥ 11.10, < 11.12.77+2 more2020-06-15
CVE-2020-0595 [CRITICAL] CWE-416 CVE-2020-0595: Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77,
Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2019-11131P3CRITICALCVSS 9.8≥ 11.0, < 11.8.70≥ 11.10, < 11.11.70+2 more2019-12-18
CVE-2019-11131 [CRITICAL] CVE-2019-11131: Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may
Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2022-26845P3CRITICALCVSS 9.8fixed in 11.8.93≥ 11.12.0, < 11.12.93+5 more2022-11-11
CVE-2022-26845 [CRITICAL] CWE-287 CVE-2022-26845: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2020-8758P3CRITICALCVSS 9.8≥ 11.8, < 11.8.79≥ 11.12, < 11.12.79+3 more2020-09-10
CVE-2020-8758 [CRITICAL] CVE-2020-8758: Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versi
Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via
nvd
CVE-2020-8752P3CRITICALCVSS 9.8fixed in 11.8.80≥ 11.12.0, < 11.12.80+3 more2020-11-12
CVE-2020-8752 [CRITICAL] CWE-787 CVE-2020-8752: Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.
nvd
CVE-2019-11107P3CRITICALCVSS 9.8≥ 12.0, < 12.0.452019-12-18
CVE-2019-11107 [CRITICAL] CWE-20 CVE-2019-11107: Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an
Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2022-29893P3HIGHCVSS 8.8fixed in 11.8.93≥ 11.12.0, < 11.12.93+5 more2022-11-11
CVE-2022-29893 [HIGH] CWE-287 CVE-2022-29893: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access.
nvd
CVE-2020-8747P3CRITICALCVSS 9.1fixed in 11.8.80≥ 11.12.0, < 11.12.80+3 more2020-11-12
CVE-2020-8747 [CRITICAL] CWE-125 CVE-2020-8747: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.7
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
nvd
CVE-2020-8749P3HIGHCVSS 8.8fixed in 11.8.80≥ 11.12.0, < 11.12.80+3 more2020-11-12
CVE-2020-8749 [HIGH] CWE-125 CVE-2020-8749: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.7
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
nvd
CVE-2019-11088P3HIGHCVSS 8.8≥ 11.0, < 11.8.70≥ 11.10, < 11.11.70+2 more2019-12-18
CVE-2019-11088 [HIGH] CWE-20 CVE-2019-11088: Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.
Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
nvd
CVE-2020-0540P3HIGHCVSS 7.5≥ 11.0, < 11.8.77≥ 11.10, < 11.12.77+2 more2020-06-15
CVE-2020-0540 [HIGH] CWE-522 CVE-2020-0540: Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and
Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
nvd
CVE-2018-3628P3HIGHCVSS 8.8≥ 3.0, ≤ 11.22.702018-07-10
CVE-2018-3628 [HIGH] CWE-119 CVE-2018-3628: Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Ma
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.
nvd
CVE-2020-0596P3HIGHCVSS 7.5≥ 11.0, < 11.8.77≥ 11.10, < 11.12.77+2 more2020-06-15
CVE-2020-0596 [HIGH] CWE-20 CVE-2020-0596: Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.
Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
nvd
CVE-2020-0538P3HIGHCVSS 7.5≥ 11.0, < 11.8.77≥ 11.10, < 11.12.77+2 more2020-06-15
CVE-2020-0538 [HIGH] CWE-20 CVE-2020-0538: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
nvd
CVE-2019-0166P3HIGHCVSS 7.5≥ 11.0, < 11.8.70≥ 11.10, < 11.11.70+2 more2019-12-18
CVE-2019-0166 [HIGH] CWE-20 CVE-2019-0166: Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 1
Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
nvd
CVE-2020-8753P3HIGHCVSS 7.5fixed in 11.8.80≥ 11.12.0, < 11.12.80+3 more2020-11-12
CVE-2020-8753 [HIGH] CWE-125 CVE-2020-8753: Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.8
Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
nvd
CVE-2020-8754P3HIGHCVSS 7.5fixed in 11.8.80≥ 11.12.0, < 11.12.80+3 more2020-11-12
CVE-2020-8754 [HIGH] CWE-125 CVE-2020-8754: Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11
Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
nvd
CVE-2020-0597P3HIGHCVSS 7.5≥ 11.0, ≤ 11.8.76≥ 11.10, ≤ 11.11.76+4 more2020-06-15
CVE-2020-0597 [HIGH] CWE-125 CVE-2020-0597: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may al
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.
nvd
1 / 3Next →