Vulnerabilities > CVE-2022-27497 - NULL Pointer Dereference vulnerability in Intel Active Management Technology Firmware

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

intel

CWE-476

NVD

Published: 2022-11-11

Updated: 2023-05-22

Summary

Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.

Vulnerable Configurations

Part	Description	Count
OS	Intel Intel Active Management Technology Firmware - Intel Active Management Technology Firmware 1.0 Intel Active Management Technology Firmware 2.0 Intel Active Management Technology Firmware 2.1 Intel Active Management Technology Firmware 2.2 Intel Active Management Technology Firmware 2.5 Intel Active Management Technology Firmware 2.6 Intel Active Management Technology Firmware 3.0 Intel Active Management Technology Firmware 3.1 Intel Active Management Technology Firmware 3.2 Intel Active Management Technology Firmware 4.0 Intel Active Management Technology Firmware 4.1 Intel Active Management Technology Firmware 5.0 Intel Active Management Technology Firmware 6.0 Intel Active Management Technology Firmware 6.1 Intel Active Management Technology Firmware 6.2 Intel Active Management Technology Firmware 7.0 Intel Active Management Technology Firmware 7.1 Intel Active Management Technology Firmware 8.0 Intel Active Management Technology Firmware 8.1 Intel Active Management Technology Firmware 9.0 Intel Active Management Technology Firmware 9.1 Intel Active Management Technology Firmware 9.5 Intel Active Management Technology Firmware 10.0 Intel Active Management Technology Firmware 11.0 Intel Active Management Technology Firmware 11.2 Intel Active Management Technology Firmware 11.5 Intel Active Management Technology Firmware 11.6 Intel Active Management Technology Firmware 11.7 Intel Active Management Technology Firmware 11.8 Intel Active Management Technology Firmware 11.8.50.3420 Intel Active Management Technology Firmware 11.8.60 Intel Active Management Technology Firmware 11.8.65 Intel Active Management Technology Firmware 11.8.70 Intel Active Management Technology Firmware 11.8.76 Intel Active Management Technology Firmware 11.8.77 Intel Active Management Technology Firmware 11.8.79 Intel Active Management Technology Firmware 11.8.80 Intel Active Management Technology Firmware 11.22.0 Intel Active Management Technology Firmware 11.22.60 Intel Active Management Technology Firmware 11.22.65 Intel Active Management Technology Firmware 11.22.70 Intel Active Management Technology Firmware 11.22.76 Intel Active Management Technology Firmware 11.22.77 Intel Active Management Technology Firmware 11.22.79 Intel Active Management Technology Firmware 11.22.80 Intel Active Management Technology Firmware 11.12.0 Intel Active Management Technology Firmware 11.12.77 Intel Active Management Technology Firmware 11.12.79 Intel Active Management Technology Firmware 11.12.80 Intel Active Management Technology Firmware 12.0 Intel Active Management Technology Firmware 12.0.0 Intel Active Management Technology Firmware 12.0.5 Intel Active Management Technology Firmware 12.0.20 Intel Active Management Technology Firmware 12.0.35 Intel Active Management Technology Firmware 12.0.45 Intel Active Management Technology Firmware 12.0.63 Intel Active Management Technology Firmware 12.0.64 Intel Active Management Technology Firmware 12.0.68 Intel Active Management Technology Firmware 12.0.70 Intel Active Management Technology Firmware *	61

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html