VULNERABILITY INTELLIGENCE
CVE-2022-26845
CVSS score8.7 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2022-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Description
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Weakness classification
- nvd@nist.gov: CWE-287
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory