CVE-2022-26845

Published: Nov 11, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected (7)

Products: Intel: Active Management Technology Firmware

Intel

1 product

Active Management Technology Firmware

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	Before 11.8.93
Intel Active Management Technology Firmware	From 11.12.0 to 11.12.93
Intel Active Management Technology Firmware	From 11.22.0 to 11.22.93
Intel Active Management Technology Firmware	From 12.0 to 12.0.92
Intel Active Management Technology Firmware	From 14.1 to 14.1.67
Intel Active Management Technology Firmware	From 15.0 to 15.0.42
Intel Active Management Technology Firmware	From 16.1.0 to 16.1.25

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.