{"api_version":"1","generated_at":"2026-04-21T08:59:57+00:00","cve":"CVE-2022-26341","urls":{"html":"https://cve.report/CVE-2022-26341","api":"https://cve.report/api/cve/CVE-2022-26341.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-26341","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-26341"},"summary":{"title":"CVE-2022-26341","description":"Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.","state":"PUBLIC","assigner":"secure@intel.com","published_at":"2022-11-11 16:15:00","updated_at":"2022-11-17 23:14:00"},"problem_types":["CWE-522"],"metrics":[],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","refsource":"MISC","tags":[],"title":"INTEL-SA-00680","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26341","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26341","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"26341","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"intel","cpe5":"active_management_technology_software_development_kit","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"26341","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"intel","cpe5":"endpoint_management_assistant","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"26341","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"intel","cpe5":"manageability_commander","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2022-26341","ASSIGNER":"secure@intel.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"escalation of privilege"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC","version":{"version_data":[{"version_value":"See references","version_affected":"="}]}}]}}]}},"references":{"reference_data":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html","refsource":"MISC","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html"}]},"impact":{"cvss":[{"version":"3.1","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N"}]}},"nvd":{"publishedDate":"2022-11-11 16:15:00","lastModifiedDate":"2022-11-17 23:14:00","problem_types":["CWE-522"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:intel:manageability_commander:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.2","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:intel:active_management_technology_software_development_kit:*:*:*:*:*:*:*:*","versionEndExcluding":"16.0.4.1","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:intel:endpoint_management_assistant:*:*:*:*:*:*:*:*","versionEndExcluding":"1.7.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}