AM
Product
Active Management Technology Firmware
On CISA KEVExploited in the wild
54
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 21Medium 23Low 0
Watch
Add Active Management Technology Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5689 In wildKEV | 9.8 | May 2 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Affected: 6.0; 6.1; 6.2; 7.0; 7.1; 8.0; +8 more |
| CVE-2022-26845 | 9.8 | Nov 11 | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more |
| CVE-2022-30601 | 9.8 | Aug 18 | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and… Affected: All versions, or not specified |
| CVE-2020-8752 | 9.8 | Nov 12 | Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2020-8758 | 9.8 | Sep 10 | Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an… Affected: 11.8 before 11.8.79; 11.12 before 11.12.79; 11.22 before 11.22.79; 12.0 before 12.0.68; 14.0 before 14.0.39 |
| CVE-2020-0595 | 9.8 | Jun 15 | Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2020-0594 | 9.8 | Jun 15 | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2019-11131 | 9.8 | Dec 18 | Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45 |
| CVE-2019-11107 | 9.8 | Dec 18 | Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network… Affected: 12.0 before 12.0.45 |
| CVE-2020-8747 | 9.1 | Nov 12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2022-29893 | 8.8 | Nov 11 | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more |
| CVE-2020-8749 | 8.8 | Nov 12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2019-11088 | 8.8 | Dec 18 | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45 |
| CVE-2018-3628 | 8.8 | Jul 10 | Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x… Affected: 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; +4 more |
| CVE-2019-11132 | 8.4 | Dec 18 | Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45 |
| CVE-2019-0131 | 8.1 | Dec 18 | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45 |
| CVE-2019-0096 | 8.0 | May 17 | Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable… Affected: 11.8.0 before 11.8.65; 11.11.0 before 11.11.65; 11.22.0 before 11.22.65; 12.0 before 12.0.35 |
| CVE-2020-8760 | 7.8 | Nov 12 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2017-5711 | 7.8 | Nov 21 | Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local… Affected: All versions, or not specified |
| CVE-2022-27497 | 7.5 | Nov 11 | Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more |
| CVE-2020-8754 | 7.5 | Nov 12 | Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2020-8753 | 7.5 | Nov 12 | Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2020-0597 | 7.5 | Jun 15 | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network… Affected: 11.0 through 11.8.76; 11.10 through 11.11.76; 11.20 through 11.22.76; 12.0 through 12.0.63; 13.0 through 13.0.31; 14.0 through 14.0.32 |
| CVE-2020-0596 | 7.5 | Jun 15 | Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2020-0540 | 7.5 | Jun 15 | Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2020-0538 | 7.5 | Jun 15 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2019-0166 | 7.5 | Dec 18 | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45 |
| CVE-2018-12187 | 7.5 | Mar 14 | Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to… Affected: 11.0 before 11.8.60; 11.10 before 11.11.60; 11.20 before 11.22.60; 12.0.0 before 12.0.20 |
| CVE-2017-5729 | 7.4 | Nov 21 | Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle Affected: 11.0 through 11.8.50.3420 |
| CVE-2017-5712 | 7.2 | Nov 21 | Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access… Affected: All versions, or not specified |
| CVE-2020-0532 | 7.1 | Jun 15 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2022-28697 | 6.8 | Aug 18 | Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via… Affected: All versions, or not specified |
| CVE-2019-11086 | 6.8 | Dec 18 | Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical… Affected: 12.0 before 12.0.45 |
| CVE-2019-0092 | 6.8 | May 17 | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially… Affected: 11.8.0 before 11.8.65; 11.11.0 before 11.11.65; 11.22.0 before 11.22.65; 12.0 before 12.0.35 |
| CVE-2021-33159 | 6.7 | Nov 11 | Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more |
| CVE-2020-8757 | 6.7 | Nov 12 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2018-3657 | 6.7 | Sep 12 | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT… Affected: before 12.0.5 |
| CVE-2018-3632 | 6.7 | Jul 10 | Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10… Affected: 6.0 through 11.20; 6.0 through 11.20; 6.0 through 11.20; 6.0 through 11.20; 6.0 through 11.20; 6.0 through 11.20; +3 more |
| CVE-2021-33068 | 6.5 | Feb 9 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access Affected: before 15.0.35 |
| CVE-2020-8746 | 6.5 | Nov 12 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45 |
| CVE-2020-0531 | 6.5 | Jun 15 | Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2018-3629 | 6.5 | Jul 10 | Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x… Affected: 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; +3 more |
| CVE-2017-5697 | 6.5 | Jun 14 | Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129… Affected: 9.1 before 9.1.40.1000; 9.5 before 9.5.60.1952; 10.0 before 10.0.50.1004; 11.0 before 11.0.0.1205; 11.6 before 11.6.25.1129 |
| CVE-2018-3616 | 5.9 | Sep 12 | Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain… Affected: before 12.0.5 |
| CVE-2022-30944 | 5.5 | Aug 18 | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local access Affected: All versions, or not specified |
| CVE-2020-8674 | 5.3 | Jun 15 | Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64; 14.0 before 14.0.33 |
| CVE-2020-0535 | 5.3 | Jun 15 | Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2018-3658 | 5.3 | Sep 12 | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial… Affected: before 12.0.5 |
| CVE-2020-0537 | 4.9 | Jun 15 | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64 |
| CVE-2019-0097 | 4.9 | May 17 | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network… Affected: 12.0.20 before 12.0.35 |