CVE-2022-30601

moderate-risk
Published 2022-08-18

Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access.

Do I need to act?

~
1.7% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (2)

Standard Manageability

Affected Vendors

Intel

References (4)

Third Party Advisory https://security.netapp.com/advisory/ntap-20221014-0004/
Mitigation https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709....
Third Party Advisory https://security.netapp.com/advisory/ntap-20221014-0004/
Mitigation https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709....
43
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 4/34 · Minimal
Exposure 7/34 · Low