Manageability Engine Firmware vulnerabilitiesRanked by how likely they are to be used.

Product14 versions
The short answer

Manageability Engine Firmware is made by Intel. We track 8 published vulnerabilities in it, across 14 versions. None of them is on the list of flaws known to be exploited today. If you run Manageability Engine Firmware, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Manageability Engine Firmware vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Manageability Engine Firmware's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Manageability Engine Firmware flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 4.4%

    Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary...

    CVSS7.2Published21 Nov 2017
  2. 3.3%

    Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.

    CVSS5.3Published12 Sep 2018
  3. 2.4%

    Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

    CVSS5.9Published12 Sep 2018
  4. 0.7%

    Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.

    CVSS7.8Published21 Nov 2017
  5. 0.6%

    Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.

    CVSS6.7Published12 Sep 2018
  6. 0.6%

    Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary...

    CVSS7.8Published21 Nov 2017
  7. 0.6%

    Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector.

    CVSS7.8Published21 Nov 2017
  8. 0.3%

    Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version...

    CVSS4.4Published5 Sep 2017
Precursor Intelligence

Running Manageability Engine Firmware? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 8 published vulnerabilities listed under the name Manageability Engine Firmware, across 14 versions.

None of Manageability Engine Firmware's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Manageability Engine Firmware. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.