CVE-2022-26341

EPSS 0.3%
Veröffentlicht 11.11.2022 16:15:12
Zuletzt bearbeitet 05.02.2025 21:15:15
Quelle secure@intel.com
CVE-Watchlists
Login
Unerledigt
Login

Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Active Management Technology Software Development Kit Version < 16.0.4.1

Intel ≫ Endpoint Management Assistant Version < 1.7.1

Intel ≫ Manageability Commander Version < 2.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.525

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com	8.2	1.8	5.8	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-26341

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-26341

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-26341

EUVD