CVEvulnerability
CVE-2022-30601
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-522
Description
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access.
Affected configurations
• intel standard manageability
• intel active management technology firmware
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://security.netapp.com/advisory/ntap-20221014-0004/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709.html Mitigation, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20221014-0004/ Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709.html Mitigation, Vendor Advisory