Intel.AMT.ISM.Web.Interface.Authorization.Privilege.Escalation

Description

This indicates an attack attempt to exploit an Privilege Escalation vulnerability in Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology.
The vulnerability is due to insufficient sanitization of user supplied inputs in the application when handling a crafted request. An attacker may be able to exploit this to bypass authentication on vulnerable systems

Affected Products

Intel manageability firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 for Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability. Versions before 6 or after 11.6 are not impacted.

Impact

Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr

References