Intel® AMT and Intel® ISM Advisory

Summary: Potential security vulnerability in Intel® Active Management Technology AMT, and Intel® Standard Manageability ISM may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8758 Description:...

The vulnerability of the IPv6 protocol implementation under Intel Active Management Technology and Intel Standard Manageability allows attackers to enhance their privileges.

The vulnerability of the IPv6 protocol implementation in Intel Active Management Technology and Intel Standard Manageability lies in the writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology and Standard Manageability, allowing a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology and Standard Manageability relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to cause a service failure

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is caused by a full exploitation of certain conditions. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure...

The vulnerability of the Windows installer of the Intel AMT SDK allows a perpetrator to increase their privileges.

The vulnerability of the Windows installer of the Intel AMT SDK is related to permission handling errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to enhance their privileges

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00391)

Intel Active Management Technology AMT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-8760

Integer overflow in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8753

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12354

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

PT-2020-4739 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is caused by an integer overflow...

PT-2020-4738 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

PT-2020-4866 · Intel · Intel Amt +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 IntelR ISM versions prior to 11.8.80 IntelR ISM version...

PT-2020-4740 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

The vulnerability of the DHCPv6 subsystem in implementations of Intel Active Management Technology and Standard Manageability allows a intruder to gain unauthorized access to protected information.

The vulnerability of the DHCPv6 subsystem in Intel Active Management Technology and Standard Manageability implementations is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of the Intel Active Management Technology implementation lies in the insufficient protection of registration data, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Intel Active Management Technology implementation is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Intel Active Management Technology implementation lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Intel Active Management Technology implementation is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...