Input validation

2019-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Insufficient input validation in the subsystem for Intel® AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.

CPENameOperatorVersion
active_management_technology_firmwarege12.0
active_management_technology_firmwarelt12.0.45
active_management_technology_firmwarege11.20
active_management_technology_firmwarelt11.22.70
active_management_technology_firmwarege11.10
active_management_technology_firmwarelt11.11.70
active_management_technology_firmwarege11.0
active_management_technology_firmwarelt11.8.70

Name	Operator	Version
active_management_technology_firmware	ge	12.0
active_management_technology_firmware	lt	12.0.45
active_management_technology_firmware	ge	11.20
active_management_technology_firmware	lt	11.22.70
active_management_technology_firmware	ge	11.10
active_management_technology_firmware	lt	11.11.70
active_management_technology_firmware	ge	11.0
active_management_technology_firmware	lt	11.8.70