CVE-2018-3629

Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet...

CVE-2018-3632

Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system...

CVE-2018-3632

CVE-2018-3632 describes memory corruption in Intel Active Management Technology (AMT) within the Intel Converged Security and Manageability Engine (CSME) firmware, affecting versions 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x (including 11.0, 11.5, 11.6, 11.7, 11.10, 11.20). An attacker with local admini...

CVE-2018-3628

Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet...

Intel Active Management Technology MEBx Access Control Bypass - US

Lenovo Security Advisory: LEN-19568 Potential Impact: Remote access and control Severity: Critical Scope of Impact: Industry-wide Summary Description: Intel has issued an advisory for Intel vPro Active Management Technology AMT to all system manufacturers. The Intel AMT default configuration has...

USB provisioning may be allowed when Intel AMT is disabled - Lenovo Support US

No description provided...

USB provisioning may be allowed when Intel AMT is disabled

Lenovo Security Advisory: LEN-3556 Potential Impact: Unwanted local AMT provisioning of system Severity: Medium Summary: Some systems with Intel’s AMT technology which is installed on many PCs across vendors may be able to be provisioned by someone with physical access to the system via a special...

Intel Active Management Technology Privilege Escalation Vulnerability (INTEL-SA-00082)

Intel Active Management Technology is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-5698

Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user...

Code injection

Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user...

Intel AMT® Upgradable to Vulnerable Firmware

Summary: Intel® Active Management Technology, Intel® Standard Manageability, and Intel® Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a...

The vulnerability of the web-server module that implements Intel Active Management Technology, a remote control technology for computers, allows attackers to gain access to the device.

The vulnerability of the web-server module that implements Intel Active Management Technology for remote control involves deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device by sending specially...

BSA-2017-320

Security Advisory ID : BSA-2017-320 Component : Intel Active Mgmt Technology Revision : 1.0: Interim There is an escalation of privilege vulnerability in Intel® Active Management Technology AMT, Intel® Standard Manageability ISM, and Intel® Small Business Technology versions firmware versions 6.x...

Intel AMT firmware clickjacking vulnerability

Intel AMT firmware A processor management firmware from Intel Corporation of the U.S.A. Web User Interface is one of the Web management interfaces. A clickjacking vulnerability exists in the Web User Interface of the Intel AMT firmware, which arises from a failure of the program to adequately...

CVE-2017-5697

Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page...

Intel Active Management Technology - System Privileges

Intel Active Management Technology - System Privileges !/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard...

Intel AMT Digest Authentication Bypass Scanner

This module scans for Intel Active Management Technology endpoints and attempts to bypass authentication using a blank HTTP digest CVE-2017-5689. This service can be found on ports 16992, 16993 tls, 623, and 624 tls. This module requires Metasploit: https://metasploit.com/download Current source:...

Intel AMT features to remotely provide the right high-risk vulnerability analysis-vulnerability warning-the black bar safety net

Earlier this week, Intel released a high-risk mention the right vulnerability, the impact of the range including the past 7 years Intel Server chip remote management capabilities. A remote attacker can exploit the vulnerability control there PC's, laptops and servers. This vulnerability number...

http-vuln-cve2017-5689 NSE Script

Detects if a system with Intel Active Management Technology is vulnerable to the INTEL-SA-00075 privilege escalation vulnerability CVE2017-5689. This script determines if a target is vulnerable by attempting to perform digest authentication with a blank response parameter. If the authentication...

Intel Active Management Technology 7.x < 7.1.91.3272 RCE

Binary data 700079.prm...