CVE-2026-20708: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...

CVE-2025-32008: Out-of-bounds Write

Out-of-bounds write in the firmware for the IntelR AMT and IntelR Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2025-20080: NULL Pointer Dereference

Null pointer dereference in the firmware for some IntelR AMT and IntelR Standard Manageability within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur...

CVE-2025-22392: Out-of-bounds Read

Out-of-bounds read in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via network access...

CVE-2024-26021: Improper Initialization

Improper initialization in the firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-38307: Improper Input Validation

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

CVE-2023-38655: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2022-36392

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-36392: Improper Input Validation

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-26341: Insufficiently Protected Credentials

Insufficiently protected credentials in software in IntelR AMT SDK before version 16.0.4.1, IntelR EMA before version 1.7.1 and IntelR MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2021-33159: Improper Authentication

Improper authentication in subsystem for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-27497: NULL Pointer Dereference

Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-26845: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-29893: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-28697: Undefined Security Weakness

Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-30944: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30601: Insufficiently Protected Credentials

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

CVE-2021-33107

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33107: Insufficiently Protected Credentials

Insufficiently protected credentials in USB provisioning for IntelR AMT SDK before version 16.0.3, IntelR SCS before version 12.2 and IntelR MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure vi...

CVE-2021-33068: NULL Pointer Dereference

Null pointer dereference in subsystem for IntelR AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access...