CVE-2019-11107

CRITICAL

Intel Active Management Technology Firmware 12.0-12.0.45 - Unauthenticated Privilege Escalation via Network Access

Title source: llm

Description

Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

Scores

CVSS v3 9.8

EPSS 0.0046

EPSS Percentile 64.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

intel/active_management_technology_firmware 12.0 - 12.0.45

Published Dec 18, 2019

Tracked Since Feb 18, 2026