Intel(R) AMT
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29893 | before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may all | HIGH 8.8 | 0.6 % | ||
| CVE-2021-33159 | before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 | Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may al | HIGH 7.4 | 0.2 % | ||
| CVE-2022-27497 | before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 | Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may all | HIGH 8.6 | 0.7 % | ||
| CVE-2022-26845 | before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may all | CRITICAL 9.8 | 0.6 % | ||
| CVE-2021-33068 | before versions 15.0.35 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-8749 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticat | HIGH 8.8 | 1.1 % | ||
| CVE-2020-8746 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-12356 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user | MEDIUM 4.4 | 0.4 % | ||
| CVE-2020-8747 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticat | CRITICAL 9.1 | 1.7 % | ||
| CVE-2020-8760 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to | HIGH 7.8 | 0.4 % | ||
| CVE-2020-8757 | versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged use | MEDIUM 6.7 | 0.4 % | ||
| CVE-2020-0537 | See provided reference | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user | MEDIUM 4.9 | 1.6 % | ||
| CVE-2020-0540 | See provided reference | Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated us | HIGH 7.5 | 2.0 % | ||
| CVE-2020-0535 | See provided reference | Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to poten | MEDIUM 5.3 | 1.6 % | ||
| CVE-2020-0531 | See provided reference | Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potenti | MEDIUM 6.5 | 1.4 % | ||
| CVE-2020-0532 | See provided reference | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated | HIGH 7.1 | 0.7 % | ||
| CVE-2020-0538 | See provided reference | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated | HIGH 7.5 | 2.3 % | ||
| CVE-2019-11086 | See provided reference | Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable e | MEDIUM 6.8 | 0.4 % | ||
| CVE-2019-11107 | See provided reference | Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enab | CRITICAL 9.8 | 1.6 % | ||
| CVE-2019-11100 | See provided reference | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe | MEDIUM 4.6 | 0.4 % | ||
| CVE-2019-0166 | See provided reference | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe | HIGH 7.5 | 1.4 % | ||
| CVE-2019-0131 | See provided reference | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthentica | HIGH 8.1 | 0.6 % | ||
| CVE-2019-11131 | See provided reference | Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potent | CRITICAL 9.8 | 1.8 % | ||
| CVE-2019-11088 | See provided reference | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthentica | HIGH 8.8 | 0.6 % | ||
| CVE-2019-11132 | See provided reference | Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to pot | HIGH 8.4 | 1.3 % |