Insufficient Input Validation in Intel AMT Subsystem

CVE-2019-0092

What is CVE-2019-0092?

The vulnerability in Intel Active Management Technology (AMT) arises due to insufficient input validation within the subsystem, which can be exploited by an unauthenticated user with physical access. This flaw may allow an attacker to escalate their privileges, potentially leading to unauthorized access and control over the affected system. Systems running versions prior to 11.8.65, along with specific versions up to 12.0.35, are susceptible to this risk. Users are encouraged to apply the available patches to mitigate any potential security threats. For more details, refer to the official Intel security advisory.

References