by Kastro
Paper/Archive/CVE-2022-30601

CVE-2022-30601

intel — Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentiall…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.7.597 × 2011.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Intel(R) AMT and Intel(R) Standard ManageabilitySee references–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00709.htmlrefsecurity.netapp.com/advisory/ntap-20221014-0004