Active Management Technology Firmware vulnerabilities

Product

Active Management Technology Firmware

by Intel · last CVE Nov 11, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities54 In the news0 Timeline

Severity mix

Critical 10High 21Medium 23Low 0

Severity

All severities54 Critical10 High21 Medium23 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Active Management Technology Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-5689 In wildKEV	9.8	92%	May 2	Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Affected: 6.0; 6.1; 6.2; 7.0; 7.1; 8.0; +8 more
CVE-2022-26845	9.8	1%	Nov 11	Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more
CVE-2022-30601	9.8	1%	Aug 18	Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and… Affected: All versions, or not specified
CVE-2020-8752	9.8	2%	Nov 12	Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2020-8758	9.8	2%	Sep 10	Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an… Affected: 11.8 before 11.8.79; 11.12 before 11.12.79; 11.22 before 11.22.79; 12.0 before 12.0.68; 14.0 before 14.0.39
CVE-2020-0595	9.8	3%	Jun 15	Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64
CVE-2020-0594	9.8	4%	Jun 15	Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64
CVE-2019-11131	9.8	2%	Dec 18	Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45
CVE-2019-11107	9.8	2%	Dec 18	Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network… Affected: 12.0 before 12.0.45
CVE-2020-8747	9.1	2%	Nov 12	Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45