Vulnerabilities fixed in Intel products

Vulnerabilities have been fixed in several Intel products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Accessing sensitive data Increased user privileges The...

Intel AMT and Intel Standard Manageability Advisory - Lenovo Support US

No description provided...

Open AMT Cloud Toolkit Advisory

Summary: A potential security vulnerability in the Open AMT Cloud Toolkit software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-25899 Description: Authentication bypass...

PT-2022-32376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns the use of READ ONCE in the amt module. It was introduced in version v5.16 and fixed in version v5.18.15. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1002979 amt: fix possible memory leak in amt_rcv()

amt: fix possible memory leak in amtrcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

PT-2022-31242

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential memory leak issue was identified in the amt rcv function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.16 and is fix...

PT-2022-31208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential null pointer dereference issue was identified in the amt rcv function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30864

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential null pointer dereference issue was identified in the amt rcv function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential memory leak issue was identified in the amt rcv function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.16 and is fixe...

CVE-2021-33068

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

Null pointer dereference

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33107

CVE-2021-33107 affects Intel AMT SDK, Intel SCS, and Intel MEBx. The issue stems from insufficiently protected credentials during USB provisioning, enabling a potential information disclosure via physical access if exploited. Affected: Intel AMT SDK before 16.0.3; Intel SCS before 12.2; Intel MEB...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33068

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33068

CVE-2021-33068 is a null pointer dereference in the Intel AMT subsystem. Intel SPS/AMT/PMC chipset firmware before certain versions may allow an authenticated remote attacker to cause a denial-of-service via network access. Public documents from NVD/Intel/Red Hat/IBM describe affected components ...

CVE-2021-33068: NULL Pointer Dereference

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2021-33107: Insufficiently Protected Credentials

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

PT-2022-10200

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 15.0.35 Description A null pointer dereference issue in the IntelR AMT subsystem may allow an authenticated user to potentially enable denial of service via network access. Recommendations For versions prior to...