{"id":"CVE-2022-26341","state":"PUBLISHED","title":"Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an au","description":"Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.","publishedAt":"2022-11-11T15:47:12.330Z","updatedAt":"2025-02-05T20:54:43.309Z","severity":{"score":8.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","source":"intel"},"assigner":"intel","products":["n/a Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC"],"affected":[{"vendor":"n/a","product":"Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC","defaultStatus":"unaffected","versions":[{"version":"See references","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html"],"weaknesses":["CWE-522"],"ingestedAt":"2026-10-29T19:49:49.689Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/26xxx/CVE-2022-26341.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-26341","state":"PUBLISHED","datePublished":"2022-11-11T15:47:12.330Z","dateUpdated":"2025-02-05T20:54:43.309Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","requesterUserId":"524a9a6b-3515-4b97-ab85-1a9a79493852","dateReserved":"2022-04-05T15:11:17.462Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access."}],"affected":[{"vendor":"n/a","product":"Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC","defaultStatus":"unaffected","versions":[{"version":"See references","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2022-11-14T17:45:56.083Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:03:32.764Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-29T20:41:47.226197Z","id":"CVE-2022-26341","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-522","type":"CWE","lang":"en","description":"CWE-522 Insufficiently Protected Credentials"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-05T20:54:43.309Z"}}]}}}