CVEInsight.

Free vulnerability intelligence for developers, security teams, and researchers. Data sourced from public databases for informational purposes only.

Explore

Legal

CVE data sourced from NVD / NIST & public disclosures.

intel

manageability_commander

4 known vulnerabilities · sorted by CVSS score

CVE-2022-26341

HIGH8.2

Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.

intel / active_management_technology_software_development_kit+2

Network

Published Nov 11, 2022

CVE-2022-29887

HIGH8.1

Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

intel / manageability_commander

Network

Published Aug 11, 2023

CVE-2021-0126

HIGH8.0

Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

intel / manageability_commander

Adjacent

Published May 12, 2022

CVE-2022-41610

MEDIUM5.0

Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.

intel / endpoint_management_assistant_configuration_tool+1

Local

Published May 10, 2023