Information disclosure

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

Improper access control

Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Authentication flaw

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

CVE-2022-25899 affects Intel’s Open AMT Cloud Toolkit prior to versions 2.0.2 and 2.2.2. The issue is described as an authentication bypass that may allow an unauthenticated user to escalate privileges via network access. Public sources (Intel advisory, Red Hat/NCSC entries) confirm the affected ...

CVE-2022-30944

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-28697

Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-28697

CVE-2022-28697 affects firmware in Intel(R) AMT and Intel(R) Standard Manageability. The issue is improper access control that may allow an unauthenticated user to escalate privileges via physical access. CVSSv3.1 metrics indicate physical attack vector, no privileges required, with high confiden...

CVE-2022-30944

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30601

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

CVE-2022-30944

CVE-2022-30944 affects Intel AMT and Intel Standard Manageability. Insufficiently protected credentials may allow a privileged user to disclose information via local access. The CVE is rated with a Local attack vector and High confidentiality impact (CVSSv3.1: 5.5). Multiple connected sources ref...

CVE-2022-30944: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30601: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

CVE-2022-25899: Incorrect Default Permissions

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-28697: Undefined Security Weakness

Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-30601

The CVE-2022-30601 entry concerns Intel AMT and Intel Standard Manageability. The issue is described as insufficiently protected credentials, which could allow an unauthenticated user to disclose information and escalate privileges via network access. Affected components cited in multiple sources...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709) (remote check)

The Intel Management Engine on the remote host has Active Management Technology AMT enabled, and, according to its self-reported version, is a version containing multiple vulnerabilities, including the following: - Insufficiently protected credentials for IntelR AMT and IntelR Standard...