CVE-2021-33159 Privilege escalation in Intel(R) AMT
A privileged local user can escalate privileges in Intel AMT firmware due to improper authentication, requiring a firmware update.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-33159?
CVE-2021-33159 is a high-severity vulnerability in Intel Active Management Technology Firmware, published on 11 Nov 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.
Weakness: CWE-287
Which versions are affected by CVE-2021-33159?
It affects 1 product.
Products include Intel Active Management Technology Firmware.
How do I fix CVE-2021-33159?
No fix has been published for CVE-2021-33159 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-33159 being exploited?
There is no known exploitation of CVE-2021-33159 in the wild and no public exploit code.
Other vulnerabilities in Intel Active Management Technology Firmware
- CVE-2022-30601 Hardcoded credentials in Intel(R) AMT and Intel(R) Standard Manageability
- CVE-2020-8752 Memory corruption in Intel(R) AMT, Intel(R) ISM versions
- CVE-2020-8758 Memory corruption in Intel(R) AMT and Intel(R) ISM
- CVE-2020-0594 Memory corruption in Intel(R) AMT and Intel(R) ISM
- CVE-2020-0595 Use after free in Intel(R) AMT and Intel(R) ISM
All Intel Active Management Technology Firmware vulnerabilities
Sources
Also known as GHSA-v593-864p-wp43.