PT-2023-13485 · Intel · Intel Standard Manageability+1
CVE-2022-36392
·
Publicado
2023-08-10
·
Atualizado
2024-10-17
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 11.8.94
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 11.12.94
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 11.22.94
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 12.0.93
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 14.1.70
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 15.0.45
Intel(R) AMT and Intel(R) Standard Manageability versions prior to 16.1.27
Description
The issue is related to improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability, which may allow an unauthenticated user to potentially enable denial of service via network access.
Recommendations
For versions prior to 11.8.94, update to version 11.8.94 or later.
For versions prior to 11.12.94, update to version 11.12.94 or later.
For versions prior to 11.22.94, update to version 11.22.94 or later.
For versions prior to 12.0.93, update to version 12.0.93 or later.
For versions prior to 14.1.70, update to version 14.1.70 or later.
For versions prior to 15.0.45, update to version 15.0.45 or later.
For versions prior to 16.1.27, update to version 16.1.27 or later.
Correção
RCE
Improper Encoding or Escaping of Output
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Intel Amt
Intel Standard Manageability