Intel AMT SDK, EMA, MC pre-v16.0.4.1,1.7.1,2.3.2 - Credential Leak
CVE-2022-26341 Published on November 11, 2022

Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.

NVD

Weakness Type

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.


Products Associated with CVE-2022-26341

Want to know whenever a new CVE is published for Intel products? stack.watch will email you.

Intel Manageability Commander
 
Intel Active Management Technology Software Development Kit
 
Intel Endpoint Management Assistant
 

Exploit Probability

EPSS
0.30%
Percentile
52.91%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.