PT-2022-17798 · Intel · Intel Amt Sdk+2

Yossef Kuszer · Published 2022-11-11 · Updated 2022-11-17 · CVE-2022-26341

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) AMT SDK versions prior to 16.0.4.1 Intel(R) EMA versions prior to 1.7.1 Intel(R) MC versions prior to 2.3.2

Description The issue involves insufficiently protected credentials in the software, potentially allowing an authenticated user to enable escalation of privilege via network access.

Recommendations For Intel(R) AMT SDK versions prior to 16.0.4.1, update to version 16.0.4.1 or later. For Intel(R) EMA versions prior to 1.7.1, update to version 1.7.1 or later. For Intel(R) MC versions prior to 2.3.2, update to version 2.3.2 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2022-26341

Affected Products

Intel Amt Sdk

Intel Ema

Intel Mc

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26341 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26341 · Security Note
• https://t.me/cibsecurity/52862 · Telegram Post