Authentication flaw

2022-11-1116:15:00

PRIOn knowledge base

www.prio-n.com

authentication

flaw

intel amt

subsystem

privileged user

escalation of privilege

local access

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper authentication in subsystem for Intel® AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
active_management_technology_firmwarelt11.8.93
active_management_technology_firmwarege11.22.0
active_management_technology_firmwarelt11.22.93
active_management_technology_firmwarege11.12.0
active_management_technology_firmwarelt11.12.93
active_management_technology_firmwarege12.0
active_management_technology_firmwarelt12.0.92
active_management_technology_firmwarege14.1
active_management_technology_firmwarelt14.1.67
active_management_technology_firmwarege15.0

Name	Operator	Version
active_management_technology_firmware	lt	11.8.93
active_management_technology_firmware	ge	11.22.0
active_management_technology_firmware	lt	11.22.93
active_management_technology_firmware	ge	11.12.0
active_management_technology_firmware	lt	11.12.93
active_management_technology_firmware	ge	12.0
active_management_technology_firmware	lt	12.0.92
active_management_technology_firmware	ge	14.1
active_management_technology_firmware	lt	14.1.67
active_management_technology_firmware	ge	15.0