Active Management Technology Firmware (Intel) - vulnerabilities (CVEs)

54 CVEs, 0 in the last 30 days, 91 known versions, newest CVE from 2022-11-11. Vendor: Intel.

CVEs of Active Management Technology Firmware

• CVE-2022-29893 - CVSS 8.8 (high), 2022-11-11: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an…
• CVE-2022-26845 - CVSS 9.8 (critical), 2022-11-11: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an…
• CVE-2022-27497 - CVSS 8.6 (high), 2022-11-11: Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an…
• CVE-2021-33159 - CVSS 7.4 (high), 2022-11-11: Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged…
• CVE-2022-28697 - CVSS 6.8 (medium), 2022-08-18: Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of…
• CVE-2022-30944 - CVSS 5.5 (medium), 2022-08-18: Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information…
• CVE-2022-30601 - CVSS 9.8 (critical), 2022-08-18: Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information…
• CVE-2021-33068 - CVSS 6.5 (medium), 2022-02-09: Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via…
• CVE-2020-8757 - CVSS 6.7 (medium), 2020-11-12: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially…
• CVE-2020-8760 - CVSS 7.8 (high), 2020-11-12: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable…
• CVE-2020-8746 - CVSS 6.5 (medium), 2020-11-12: Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to…
• CVE-2020-8752 - CVSS 9.8 (critical), 2020-11-12: Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an…
• CVE-2020-8749 - CVSS 8.8 (high), 2020-11-12: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to…
• CVE-2020-8754 - CVSS 7.5 (high), 2020-11-12: Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated…
• CVE-2020-8747 - CVSS 9.1 (critical), 2020-11-12: Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to…
• CVE-2020-8753 - CVSS 7.5 (high), 2020-11-12: Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…
• CVE-2020-12356 - CVSS 4.4 (medium), 2020-11-12: Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially…
• CVE-2020-8758 - CVSS 9.8 (critical), 2020-09-10: Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and…
• CVE-2020-8674 - CVSS 5.3 (medium), 2020-06-15: Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an…
• CVE-2020-0594 - CVSS 9.8 (critical), 2020-06-15: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated…
• CVE-2020-0597 - CVSS 7.5 (high), 2020-06-15: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial…
• CVE-2020-0540 - CVSS 7.5 (high), 2020-06-15: Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially…
• CVE-2020-0596 - CVSS 7.5 (high), 2020-06-15: Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an…
• CVE-2020-0595 - CVSS 9.8 (critical), 2020-06-15: Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to…
• CVE-2020-0531 - CVSS 6.5 (medium), 2020-06-15: Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable…
• CVE-2020-0537 - CVSS 4.9 (medium), 2020-06-15: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially…
• CVE-2020-0535 - CVSS 5.3 (medium), 2020-06-15: Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable…
• CVE-2020-0532 - CVSS 7.1 (high), 2020-06-15: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to…
• CVE-2020-0538 - CVSS 7.5 (high), 2020-06-15: Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to…
• CVE-2019-11132 - CVSS 8.4 (high), 2019-12-18: Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable…
• CVE-2019-11131 - CVSS 9.8 (critical), 2019-12-18: Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable…
• CVE-2019-11086 - CVSS 6.8 (medium), 2019-12-18: Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of…
• CVE-2019-11107 - CVSS 9.8 (critical), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of…
• CVE-2019-11100 - CVSS 4.6 (medium), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to…
• CVE-2019-11088 - CVSS 8.8 (high), 2019-12-18: Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to…
• CVE-2019-0166 - CVSS 7.5 (high), 2019-12-18: Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to…
• CVE-2019-0131 - CVSS 8.1 (high), 2019-12-18: Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to…
• CVE-2019-0096 - CVSS 8 (high), 2019-05-17: Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to…
• CVE-2019-0094 - CVSS 4.3 (medium), 2019-05-17: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated…
• CVE-2019-0092 - CVSS 6.8 (medium), 2019-05-17: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated…
• CVE-2019-0097 - CVSS 4.9 (medium), 2019-05-17: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of…
• CVE-2018-12187 - CVSS 7.5 (high), 2019-03-14: Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an…
• CVE-2018-3616 - CVSS 5.9 (medium), 2018-09-12: Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to…
• CVE-2018-3658 - CVSS 5.3 (medium), 2018-09-12: Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially…
• CVE-2018-3657 - CVSS 6.7 (medium), 2018-09-12: Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code…
• CVE-2018-3628 - CVSS 8.8 (high), 2018-07-10: Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x,…
• CVE-2018-3632 - CVSS 6.7 (medium), 2018-07-10: Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 /…
• CVE-2018-3629 - CVSS 6.5 (medium), 2018-07-10: Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x,…
• CVE-2017-5711 - CVSS 7.8 (high), 2017-11-21: Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow…
• CVE-2017-5729 - CVSS 7.4 (high), 2017-11-21: Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based…
• CVE-2017-5712 - CVSS 7.2 (high), 2017-11-21: Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with…
• CVE-2017-5698 - CVSS 4.4 (medium), 2017-09-05: Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000…
• CVE-2017-5697 - CVSS 6.5 (medium), 2017-06-14: Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and…
• CVE-2017-5689 - CVSS 9.8 (critical), 2017-05-02: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel…