Active Management Technology Firmware vulnerabilities

Product

Active Management Technology Firmware

by Intel · last CVE Nov 11, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities54 In the news0 Timeline

Severity mix

Critical 10High 21Medium 23Low 0

Severity

All severities54 Critical10 High21 Medium23 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Active Management Technology Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-29893	8.8	1%	Nov 11	Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more
CVE-2020-8749	8.8	1%	Nov 12	Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2019-11088	8.8	1%	Dec 18	Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45
CVE-2018-3628	8.8	1%	Jul 10	Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x… Affected: 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; 3.0 through 11.22.70; +4 more
CVE-2019-11132	8.4	1%	Dec 18	Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45
CVE-2019-0131	8.1	1%	Dec 18	Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45
CVE-2019-0096	8.0	0%	May 17	Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable… Affected: 11.8.0 before 11.8.65; 11.11.0 before 11.11.65; 11.22.0 before 11.22.65; 12.0 before 12.0.35
CVE-2020-8760	7.8	0%	Nov 12	Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2017-5711	7.8	1%	Nov 21	Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local… Affected: All versions, or not specified
CVE-2022-27497	7.5	1%	Nov 11	Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to… Affected: before 11.8.93; 11.12.0 before 11.12.93; 11.22.0 before 11.22.93; 12.0 before 12.0.92; 14.1 before 14.1.67; 15.0 before 15.0.42; +1 more
CVE-2020-8754	7.5	1%	Nov 12	Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2020-8753	7.5	1%	Nov 12	Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to… Affected: before 11.8.80; 11.12.0 before 11.12.80; 11.22.0 before 11.22.80; 12.0 before 12.0.70; 14.0 before 14.0.45
CVE-2020-0597	7.5	3%	Jun 15	Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network… Affected: 11.0 through 11.8.76; 11.10 through 11.11.76; 11.20 through 11.22.76; 12.0 through 12.0.63; 13.0 through 13.0.31; 14.0 through 14.0.32
CVE-2020-0596	7.5	2%	Jun 15	Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64
CVE-2020-0540	7.5	2%	Jun 15	Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64
CVE-2020-0538	7.5	2%	Jun 15	Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64
CVE-2019-0166	7.5	1%	Dec 18	Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable… Affected: 11.0 before 11.8.70; 11.10 before 11.11.70; 11.20 before 11.22.70; 12.0 before 12.0.45
CVE-2018-12187	7.5	1%	Mar 14	Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to… Affected: 11.0 before 11.8.60; 11.10 before 11.11.60; 11.20 before 11.22.60; 12.0.0 before 12.0.20
CVE-2017-5729	7.4	1%	Nov 21	Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle Affected: 11.0 through 11.8.50.3420
CVE-2017-5712	7.2	4%	Nov 21	Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access… Affected: All versions, or not specified
CVE-2020-0532	7.1	1%	Jun 15	Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of… Affected: 11.0 before 11.8.77; 11.10 before 11.12.77; 11.20 before 11.22.77; 12.0 before 12.0.64