CVE-2019-11088

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2019-11088

CVE-2019-11088 concerns Intel AMT: Insufficient input validation in the AMT subsystem may allow an unauthenticated user to escalate privileges via adjacent access. Affected are AMT versions before 11.8.70, 11.11.70, 11.22.70 and 12.0.45 (per Intel AMT/CSME/TXE advisories). The issue is described ...

CVE-2019-11132

CVE-2019-11132 : Cross-site scripting vulnerability in the Intel Active Management Technology (AMT) subsystem prior to firmware versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 could allow a privileged user to escalate privileges via network access. The issue is documented in multiple sources (NV...

CVE-2019-11132

Cross site scripting in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2019-11100: Improper Input Validation

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2019-0131: Improper Input Validation

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2019-11086: Improper Input Validation

Insufficient input validation in subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2019-0166: Improper Input Validation

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2019-11088: Improper Input Validation

Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2019-11132: Improper Neutralization of Input During Web Page Generation

Cross site scripting in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2019-11131: Undefined Security Weakness

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11107: Improper Input Validation

Insufficient input validation in the subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

PT-2019-3845

Name of the Vulnerable Software and Affected Versions Intel Active Management Technology AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in the Intel AMT subsystem, which may allow an unauthenticated user to potentially enable escalation of privileg...

PT-2019-4052

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in a subsystem, which may...

PT-2019-3840

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in the IntelR AMT subsystem...

PT-2019-3836

Name of the Vulnerable Software and Affected Versions Intel Active Management Technology AMT versions prior to 11.8.70 Intel Active Management Technology AMT versions prior to 11.11.70 Intel Active Management Technology AMT versions prior to 11.22.70 Intel Active Management Technology AMT version...

PT-2019-4057

Name of the Vulnerable Software and Affected Versions IntelR AMT versions prior to 11.8.70 IntelR AMT versions prior to 11.11.70 IntelR AMT versions prior to 11.22.70 IntelR AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in a subsystem, which may...

PT-2019-3842

Name of the Vulnerable Software and Affected Versions Intel Active Management Technology AMT versions prior to 12.0.45 Description The issue is related to insufficient input validation in the Intel AMT subsystem. This can potentially allow an unauthenticated user to escalate their privileges via...

PT-2019-4053

Name of the Vulnerable Software and Affected Versions Intel Active Management Technology AMT versions prior to 11.8.70 Intel Active Management Technology AMT versions prior to 11.11.70 Intel Active Management Technology AMT versions prior to 11.22.70 Intel Active Management Technology AMT version...