Endpoint Management Assistant
by Intel
CVEs (9)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-12315 | Cri | 0.64 | 9.8 | 0.02 | Nov 12, 2020 | Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. | ||
| CVE-2025-35990 | Hig | 0.57 | 8.8 | 0.00 | May 12, 2026 | Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack… | ||
| CVE-2024-32483 | Hig | 0.53 | 8.2 | 0.00 | Nov 13, 2024 | Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access. | ||
| CVE-2022-26341 | Hig | 0.53 | 8.2 | 0.00 | Nov 11, 2022 | Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access. | ||
| CVE-2021-0013 | Hig | 0.49 | 7.5 | 0.01 | Nov 17, 2021 | Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access. | ||
| CVE-2020-12316 | Med | 0.36 | 5.5 | 0.00 | Nov 12, 2020 | Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access. | ||
| CVE-2022-45128 | Med | 0.33 | 5.0 | 0.00 | May 10, 2023 | Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access. | ||
| CVE-2022-38056 | Low | 0.25 | 3.8 | 0.00 | Feb 16, 2023 | Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access. | ||
| CVE-2022-30297 | Low | 0.25 | 3.8 | 0.00 | Nov 11, 2022 | Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access. |
- risk 0.64cvss 9.8epss 0.02
Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
- risk 0.57cvss 8.8epss 0.00
Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack…
- risk 0.53cvss 8.2epss 0.00
Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- risk 0.53cvss 8.2epss 0.00
Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
- risk 0.49cvss 7.5epss 0.01
Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.
- risk 0.36cvss 5.5epss 0.00
Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.
- risk 0.33cvss 5.0epss 0.00
Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.
- risk 0.25cvss 3.8epss 0.00
Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access.
- risk 0.25cvss 3.8epss 0.00
Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.