Overview 54 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
54matches
0in Waratek scope0.0%
0protected0.0%
1exploited1.9%
1CISA KEV1.9%
1public PoC1.9%
1EPSS ≥ 0.51.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
10
18.5%
Not applicable
44
81.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
54
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
1.9%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
53
98.1%
split by
peak 11 / quarter
Q2 172
Not applicable2
Critical1
Medium1
not blocked2
Exploited1
No public exploit1
Q3 171
Not applicable1
Medium1
not blocked1
No public exploit1
Q4 173
Not applicable3
High3
not blocked3
No public exploit3
Q1 180
Q2 180
Q3 186
Not applicable6
High1
Medium5
not blocked6
No public exploit6
Q4 180
Q1 191
Not applicable1
High1
not blocked1
No public exploit1
Q2 194
Not applicable4
High1
Medium3
not blocked4
No public exploit4
Q3 190
Q4 198
Not applicable8
Critical2
High4
Medium2
not blocked8
No public exploit8
Q1 200
Q2 2011
Not applicable11
Critical2
High5
Medium4
not blocked11
No public exploit11
Q3 201
Outside Waratek scope1
Critical1
not blocked1
No public exploit1
Q4 209
Outside Waratek scope8
Not applicable1
Critical2
High4
Medium3
not blocked9
No public exploit9
Q1 210
Q2 210
Q3 210
Q4 210
Q1 221
Outside Waratek scope1
Medium1
not blocked1
No public exploit1
Q2 220
Q3 223
Not applicable3
Critical1
Medium2
not blocked3
No public exploit3
Q4 224
Not applicable4
Critical1
High3
not blocked4
No public exploit4
Q2 17Q4 17Q2 18Q4 18Q2 19Q4 19Q2 20Q4 20Q2 21Q4 21Q2 22Q4 22
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2022-29893 | High | 2022-11-11 | Not applicable | No public exploit | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-27497 | High | 2022-11-11 | Not applicable | No public exploit | Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2022-26845 | Critical | 2022-11-11 | Not applicable | No public exploit | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2021-33159 | High | 2022-11-11 | Not applicable | No public exploit | Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2022-30944 | Medium | 2022-08-18 | Not applicable | No public exploit | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2022-30601 | Critical | 2022-08-18 | Not applicable | No public exploit | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access. |
| CVE-2022-28697 | Medium | 2022-08-18 | Not applicable | No public exploit | Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2021-33068 | Medium | 2022-02-09 | Outside Waratek scope | No public exploit | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access. |
| CVE-2020-8760 | High | 2020-11-12 | Outside Waratek scope | No public exploit | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2020-8757 | Medium | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access. |
| CVE-2020-8754 | High | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-8753 | High | 2020-11-12 | Not applicable | No public exploit | Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-8752 | Critical | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access. |
| CVE-2020-8749 | High | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. |
| CVE-2020-8747 | Critical | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access. |
| CVE-2020-8746 | Medium | 2020-11-12 | Outside Waratek scope | No public exploit | Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2020-12356 | Medium | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2020-8758 | Critical | 2020-09-10 | Outside Waratek scope | No public exploit | Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access. |
| CVE-2020-8674 | Medium | 2020-06-15 | Not applicable | No public exploit | Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-0597 | High | 2020-06-15 | Not applicable | No public exploit | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2020-0596 | High | 2020-06-15 | Not applicable | No public exploit | Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-0595 | Critical | 2020-06-15 | Not applicable | No public exploit | Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2020-0594 | Critical | 2020-06-15 | Not applicable | No public exploit | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2020-0540 | High | 2020-06-15 | Not applicable | No public exploit | Insufficiently protected credentials in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-0538 | High | 2020-06-15 | Not applicable | No public exploit | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service via network access. |
| CVE-2020-0537 | Medium | 2020-06-15 | Not applicable | No public exploit | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access. |
| CVE-2020-0535 | Medium | 2020-06-15 | Not applicable | No public exploit | Improper input validation in Intel(R) AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2020-0532 | High | 2020-06-15 | Not applicable | No public exploit | Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access. |
| CVE-2020-0531 | Medium | 2020-06-15 | Not applicable | No public exploit | Improper input validation in Intel(R) AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access. |
| CVE-2019-11132 | High | 2019-12-18 | Not applicable | No public exploit | Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access. |
| CVE-2019-11131 | Critical | 2019-12-18 | Not applicable | No public exploit | Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-11107 | Critical | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-11100 | Medium | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access. |
| CVE-2019-11088 | High | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. |
| CVE-2019-11086 | Medium | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2019-0166 | High | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access. |
| CVE-2019-0131 | High | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access. |
| CVE-2019-0097 | Medium | 2019-05-17 | Not applicable | No public exploit | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access. |
| CVE-2019-0096 | High | 2019-05-17 | Not applicable | No public exploit | Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access. |
| CVE-2019-0094 | Medium | 2019-05-17 | Not applicable | No public exploit | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access. |
| CVE-2019-0092 | Medium | 2019-05-17 | Not applicable | No public exploit | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. |
| CVE-2018-12187 | High | 2019-03-14 | Not applicable | No public exploit | Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access. |
| CVE-2018-3658 | Medium | 2018-09-12 | Not applicable | No public exploit | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access. |
| CVE-2018-3657 | Medium | 2018-09-12 | Not applicable | No public exploit | Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access. |
| CVE-2018-3616 | Medium | 2018-09-12 | Not applicable | No public exploit | Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network. |
| CVE-2018-3632 | Medium | 2018-07-10 | Not applicable | No public exploit | Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system. |
| CVE-2018-3629 | Medium | 2018-07-10 | Not applicable | No public exploit | Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet. |
| CVE-2018-3628 | High | 2018-07-10 | Not applicable | No public exploit | Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet. |
| CVE-2017-5729 | High | 2017-11-21 | Not applicable | No public exploit | Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle. |
| CVE-2017-5712 | High | 2017-11-21 | Not applicable | No public exploit | Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege. |
| CVE-2017-5711 | High | 2017-11-21 | Not applicable | No public exploit | Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege. |
| CVE-2017-5698 | Medium | 2017-09-05 | Not applicable | No public exploit | Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges. |
| CVE-2017-5697 | Medium | 2017-06-14 | Not applicable | No public exploit | Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004, 11.0.0.1205, and 11.6.25.1129 potentially allowing a remote attacker to hijack users web clicks via attacker's crafted web page. |
| CVE-2017-5689 | Critical | 2017-05-02 | Not applicable | Exploited | An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). |