Active Management Technology Firmware

CVEs (56)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-5711	Intel Manageability Engine Firmware	Hig	0.51	7.8	0.01	Nov 21, 2017	Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.
CVE-2020-8754	Intel AMT	Hig	0.49	7.5	0.01	Nov 12, 2020	Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-8753	Intel AMT	Hig	0.49	7.5	0.01	Nov 12, 2020	Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0597	Intel AMT	Hig	0.49	7.5	0.03	Jun 15, 2020	Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2020-0596	Intel AMT	Hig	0.49	7.5	0.02	Jun 15, 2020	Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0540	Intel AMT	Hig	0.49	7.5	0.02	Jun 15, 2020	Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0538	Intel AMT	Hig	0.49	7.5	0.02	Jun 15, 2020	Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-0166	Intel AMT	Hig	0.49	7.5	0.01	Dec 18, 2019	Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2018-12187	Intel Active Management Technology Firmware	Hig	0.49	7.5	0.01	Mar 14, 2019	Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.
CVE-2021-33159	Intel AMT	Hig	0.48	7.4	0.00	Nov 11, 2022	Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2017-5729	Intel Dual-Band and Tri-Band Wireless-AC Products	Hig	0.48	7.4	0.01	Nov 21, 2017	Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle.
CVE-2017-5712	Intel Manageability Engine Firmware	Hig	0.47	7.2	0.04	Nov 21, 2017	Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
CVE-2020-0532	Intel AMT	Hig	0.46	7.1	0.01	Jun 15, 2020	Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
CVE-2022-28697	Intel Standard Manageability	Med	0.44	6.8	0.00	Aug 18, 2022	Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2020-8757	Intel AMT	Med	0.44	6.7	0.00	Nov 12, 2020	Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2019-11086	Intel AMT	Med	0.44	6.8	0.00	Dec 18, 2019	Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2019-0092	Intel AMT	Med	0.44	6.8	0.00	May 17, 2019	Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2018-3657	Intel AMT	Med	0.44	6.7	0.01	Sep 12, 2018	Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
CVE-2018-3632	Intel Converged Security Manageability Engine Firmware	Med	0.44	6.7	0.00	Jul 10, 2018	Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
CVE-2021-33068	Intel AMT	Med	0.42	6.5	0.01	Feb 9, 2022	Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access.

CVE-2017-5711HigNov 21, 2017
Intel
Manageability Engine Firmware
risk 0.51cvss 7.8epss 0.01
Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.
CVE-2020-8754HigNov 12, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-8753HigNov 12, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0597HigJun 15, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.03
Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2020-0596HigJun 15, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.02
Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0540HigJun 15, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.02
Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2020-0538HigJun 15, 2020
Intel
AMT
risk 0.49cvss 7.5epss 0.02
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-0166HigDec 18, 2019
Intel
AMT
risk 0.49cvss 7.5epss 0.01
Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2018-12187HigMar 14, 2019
Intel
Active Management Technology Firmware
risk 0.49cvss 7.5epss 0.01
Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.
CVE-2021-33159HigNov 11, 2022
Intel
AMT
risk 0.48cvss 7.4epss 0.00
Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2017-5729HigNov 21, 2017
Intel
Dual-Band and Tri-Band Wireless-AC Products
risk 0.48cvss 7.4epss 0.01
Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle.
CVE-2017-5712HigNov 21, 2017
Intel
Manageability Engine Firmware
risk 0.47cvss 7.2epss 0.04
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
CVE-2020-0532HigJun 15, 2020
Intel
AMT
risk 0.46cvss 7.1epss 0.01
Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
CVE-2022-28697MedAug 18, 2022
Intel
Standard Manageability
risk 0.44cvss 6.8epss 0.00
Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2020-8757MedNov 12, 2020
Intel
AMT
risk 0.44cvss 6.7epss 0.00
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2019-11086MedDec 18, 2019
Intel
AMT
risk 0.44cvss 6.8epss 0.00
Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2019-0092MedMay 17, 2019
Intel
AMT
risk 0.44cvss 6.8epss 0.00
Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2018-3657MedSep 12, 2018
Intel
AMT
risk 0.44cvss 6.7epss 0.01
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
CVE-2018-3632MedJul 10, 2018
Intel
Converged Security Manageability Engine Firmware
risk 0.44cvss 6.7epss 0.00
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
CVE-2021-33068MedFeb 9, 2022
Intel
AMT
risk 0.42cvss 6.5epss 0.01
Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access.

Page 2 of 3