Intel Active Management Technology Software Development Kit vulnerabilities

3 CVEs affecting Intel Active Management Technology Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26341, published 2022-11-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-26341, published 2022-11-11. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to…
CVE-2020-12354, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-33107, published 2022-02-09. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011,…