CVE-2022-27497

Published: Nov 11, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.

Affected (7)

Products: Intel: Active Management Technology Firmware

Intel

1 product

Active Management Technology Firmware

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Intel Active Management Technology Firmware	Before 11.8.93
Intel Active Management Technology Firmware	From 11.12.0 to 11.12.93
Intel Active Management Technology Firmware	From 11.22.0 to 11.22.93
Intel Active Management Technology Firmware	From 12.0 to 12.0.92
Intel Active Management Technology Firmware	From 14.1 to 14.1.67
Intel Active Management Technology Firmware	From 15.0 to 15.0.42
Intel Active Management Technology Firmware	From 16.1.0 to 16.1.25

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.