Design/Logic Flaw

2017-06-1412:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker’s crafted web page.

CPENameOperatorVersion
active_management_technology_firmwarege9.1
active_management_technology_firmwarelt9.1.40.1000
active_management_technology_firmwarege9.5
active_management_technology_firmwarelt9.5.60.1952
active_management_technology_firmwarege10.0
active_management_technology_firmwarelt10.0.50.1004
active_management_technology_firmwarege11.0
active_management_technology_firmwarelt11.0.0.1205
active_management_technology_firmwarege11.6
active_management_technology_firmwarelt11.6.25.1129

Name	Operator	Version
active_management_technology_firmware	ge	9.1
active_management_technology_firmware	lt	9.1.40.1000
active_management_technology_firmware	ge	9.5
active_management_technology_firmware	lt	9.5.60.1952
active_management_technology_firmware	ge	10.0
active_management_technology_firmware	lt	10.0.50.1004
active_management_technology_firmware	ge	11.0
active_management_technology_firmware	lt	11.0.0.1205
active_management_technology_firmware	ge	11.6
active_management_technology_firmware	lt	11.6.25.1129