CVE-2021-33159

CVE Database · CVE-2021-33159

CVE-2021-33159

· HIGHModified

CVSS v3.1

7.4

EPSS

0.18%

Published

Nov 11, 2022

Modified

Feb 5, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H

Weaknesses (CWE)

CWE-287CWE-287

Affected Products (7)

intel · active_management_technology_firmware (up to 11.8.93)vulnerable

intel · active_management_technology_firmware (up to 11.12.93)vulnerable

intel · active_management_technology_firmware (up to 11.22.93)vulnerable

intel · active_management_technology_firmware (up to 12.0.92)vulnerable

intel · active_management_technology_firmware (up to 14.1.67)vulnerable

intel · active_management_technology_firmware (up to 15.0.42)vulnerable

intel · active_management_technology_firmware (up to 16.1.25)vulnerable

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs