CVE-2022-27497

HIGH

Intel AMT Firmware < 11.8.93 - Unauthenticated Denial of Service via Null Pointer Dereference

Title source: llm
STIX 2.1

Description

Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.

References (1)

Core 1

Scores

CVSS v3 8.6
EPSS 0.0058
EPSS Percentile 69.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (1)
intel/active_management_technology_firmware < 11.8.93
Published Nov 11, 2022
Tracked Since Feb 18, 2026