CVE-2021-33159 is an improper authentication vulnerability in Intel Active Management Technology (AMT) firmware versions prior to 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, and 16.1.25. This flaw allows a privileged local user to potentially escalate privileges. With a CVSS score of 6.7 (Medium), the attack requires local access and high privileges, but has a high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, and it has received minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 11.8.93CPE matchmatch criteria | cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:* | ||
>= 11.12.0, < 11.12.93CPE matchmatch criteria | cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:* | ||
>= 11.22.0, < 11.22.93CPE matchmatch criteria | cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:* | ||
>= 12.0, < 12.0.92CPE matchmatch criteria | cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:* | ||
>= 14.1, < 14.1.67CPE matchmatch criteria | cpe:2.3:o:intel:active_management_technology_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.