CVE-2022-28697

CVE-2022-28697 affects firmware in Intel(R) AMT and Intel(R) Standard Manageability. The issue is improper access control that may allow an unauthenticated user to escalate privileges via physical access. CVSSv3.1 metrics indicate physical attack vector, no privileges required, with high confiden...

CVE-2022-30944

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30601

The CVE-2022-30601 entry concerns Intel AMT and Intel Standard Manageability. The issue is described as insufficiently protected credentials, which could allow an unauthenticated user to disclose information and escalate privileges via network access. Affected components cited in multiple sources...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709) (remote check)

The Intel Management Engine on the remote host has Active Management Technology AMT enabled, and, according to its self-reported version, is a version containing multiple vulnerabilities, including the following: - Insufficiently protected credentials for IntelR AMT and IntelR Standard...

Vulnerabilities fixed in Intel products

Vulnerabilities have been fixed in several Intel products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Accessing sensitive data Increased user privileges The...

Intel AMT and Intel Standard Manageability Advisory - Lenovo Support US

No description provided...

Open AMT Cloud Toolkit Advisory

Summary: A potential security vulnerability in the Open AMT Cloud Toolkit software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-25899 Description: Authentication bypass...

GSD-2022-1002979 amt: fix possible memory leak in amt_rcv()

amt: fix possible memory leak in amtrcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33068

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

Null pointer dereference

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33107

CVE-2021-33107 affects Intel AMT SDK, Intel SCS, and Intel MEBx. The issue stems from insufficiently protected credentials during USB provisioning, enabling a potential information disclosure via physical access if exploited. Affected: Intel AMT SDK before 16.0.3; Intel SCS before 12.2; Intel MEB...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33068

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33068

CVE-2021-33068 is a null pointer dereference in the Intel AMT subsystem. Intel SPS/AMT/PMC chipset firmware before certain versions may allow an authenticated remote attacker to cause a denial-of-service via network access. Public documents from NVD/Intel/Red Hat/IBM describe affected components ...

Intel AMT、Intel PROSet/Wireless WiFi和Intel Killer WiFi 输入验证错误漏洞

Intel AMT and others are products of Intel Corporation Intel, U.S.A. Intel AMT is an Active Management Technology module.Intel PROSet/Wireless WiFi is a wireless network card driver.Intel Killer WiFi is a wireless network card driver. An input validation error vulnerability exists in Intel AMT,...

2021.2 IPU – Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Chipset Firmware in Intel® Server Platform Services SPS, Intel® Active Management Technology AMT and the Intel Power Management Controller PMC may allow escalation of privilege or denial of service. Intel is releasing firmware updates to...

Intel AMT、Intel PROSet/Wireless WiFi和Intel Killer WiFi 输入验证错误漏洞

Intel AMT and others are products of Intel Corporation Intel, U.S.A. Intel AMT is an Active Management Technology module.Intel PROSet/Wireless WiFi is a wireless network card driver.Intel Killer WiFi is a wireless network card driver. An input validation error vulnerability exists in Intel AMT,...

Intel AMT、Intel PROSet/Wireless WiFi和Intel Killer WiFi 输入验证错误漏洞

Intel AMT and others are products of Intel Corporation Intel, U.S.A. Intel AMT is an Active Management Technology module.Intel PROSet/Wireless WiFi is a wireless network card driver.Intel Killer WiFi is a wireless network card driver. An input validation error vulnerability exists in Intel AMT,...