Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709)

The Intel Management Engine on the remote host has Active Management Technology (AMT) enabled, and, according to its self-reported version, is a version containing multiple vulnerabilities, including the following:

• Insufficiently protected credentials for Intel® AMT and Intel® Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access. (CVE-2022-30601)

• Insufficiently protected credentials for Intel® AMT and Intel® Standard Manageability may allow a privileged user to potentially enable information disclosure via local access. (CVE-2022-30944)

• Improper access control in firmware for Intel® AMT and Intel® Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access.(CVE-2022-28697)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.