Intel Active Management Technology Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Active Management Technology Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (54)

• CVE-2020-0594 — CVSS 9.8 (critical): Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an…
• CVE-2022-30601 — CVSS 9.8 (critical): Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially…
• CVE-2017-5689 — CVSS 9.8 (critical) — actively exploited: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology…
• CVE-2020-8758 — CVSS 9.8 (critical): Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79…
• CVE-2020-8752 — CVSS 9.8 (critical): Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may…
• CVE-2019-11107 — CVSS 9.8 (critical): Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially…
• CVE-2019-11131 — CVSS 9.8 (critical): Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to…
• CVE-2020-0595 — CVSS 9.8 (critical): Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an…
• CVE-2020-8747 — CVSS 9.1 (critical): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…
• CVE-2020-8749 — CVSS 8.8 (high): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…
• CVE-2018-3628 — CVSS 8.8 (high): Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x…
• CVE-2019-11088 — CVSS 8.8 (high): Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an…
• CVE-2022-26845 — CVSS 8.7 (high): Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may…
• CVE-2022-27497 — CVSS 8.6 (high): Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may…
• CVE-2019-11132 — CVSS 8.4 (high): Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to…
• CVE-2022-29893 — CVSS 8.1 (high): Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may…
• CVE-2019-0131 — CVSS 8.1 (high): Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an…
• CVE-2019-0096 — CVSS 8.0 (high): Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an…
• CVE-2017-5711 — CVSS 7.8 (high): Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1…
• CVE-2020-8760 — CVSS 7.8 (high): Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to…
• CVE-2020-8753 — CVSS 7.5 (high): Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may…
• CVE-2020-0596 — CVSS 7.5 (high): Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may…
• CVE-2020-8754 — CVSS 7.5 (high): Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow…
• CVE-2019-0166 — CVSS 7.5 (high): Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an…
• CVE-2020-0540 — CVSS 7.5 (high): Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated…
• CVE-2020-0538 — CVSS 7.5 (high): Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an…
• CVE-2020-0597 — CVSS 7.5 (high): Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to…
• CVE-2018-12187 — CVSS 7.5 (high): Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20…
• CVE-2021-33159 — CVSS 7.4 (high): Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may…
• CVE-2017-5729 — CVSS 7.4 (high): Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames…
• CVE-2017-5712 — CVSS 7.2 (high): Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20…
• CVE-2020-0532 — CVSS 7.1 (high): Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an…
• CVE-2019-0092 — CVSS 6.8 (medium): Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an…
• CVE-2022-28697 — CVSS 6.8 (medium): Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially…
• CVE-2019-11086 — CVSS 6.8 (medium): Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable…
• CVE-2018-3632 — CVSS 6.7 (medium): Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x /…
• CVE-2020-8757 — CVSS 6.7 (medium): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged…
• CVE-2018-3657 — CVSS 6.7 (medium): Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially…
• CVE-2021-33068 — CVSS 6.5 (medium): Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial…
• CVE-2020-0531 — CVSS 6.5 (medium): Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to…
• CVE-2018-3629 — CVSS 6.5 (medium): Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x…
• CVE-2017-5697 — CVSS 6.5 (medium): Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952…
• CVE-2020-8746 — CVSS 6.5 (medium): Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an…
• CVE-2018-3616 — CVSS 5.9 (medium): Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an…
• CVE-2022-30944 — CVSS 5.5 (medium): Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable…
• CVE-2018-3658 — CVSS 5.3 (medium): Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT…
• CVE-2020-0535 — CVSS 5.3 (medium): Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to…
• CVE-2020-8674 — CVSS 5.3 (medium): Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may…
• CVE-2020-0537 — CVSS 4.9 (medium): Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user…
• CVE-2019-0097 — CVSS 4.9 (medium): Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially…
• CVE-2019-11100 — CVSS 4.6 (medium): Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an…
• CVE-2017-5698 — CVSS 4.4 (medium): Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and…
• CVE-2020-12356 — CVSS 4.4 (medium): Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged…
• CVE-2019-0094 — CVSS 4.3 (medium): Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an…