CVE-2021-33159

Published: Nov 11, 2022Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (7)

Products: Intel: Active Management Technology Firmware

Intel

1 product

Active Management Technology Firmware

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	version < 11.8.93
Intel Active Management Technology Firmware	11.12.0 ≤ version < 11.12.93
Intel Active Management Technology Firmware	11.22.0 ≤ version < 11.22.93
Intel Active Management Technology Firmware	12.0 ≤ version < 12.0.92
Intel Active Management Technology Firmware	14.1 ≤ version < 14.1.67
Intel Active Management Technology Firmware	15.0 ≤ version < 15.0.42
Intel Active Management Technology Firmware	16.1.0 ≤ version < 16.1.25

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.