Intel Endpoint Management Assistant vulnerabilities
9 vulnerabilities
Known vulnerabilities in Intel Endpoint Management Assistant, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-0013intelendpoint_management_assistant
EPSS score0.97%
Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2025-35990intelendpoint_management_assistantEPSS score0.22%
Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.CVE-2020-12316intelendpoint_management_assistantEPSS score0.28%
Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.CVE-2020-12315intelendpoint_management_assistantEPSS score1.75%
Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.CVE-2022-26341intelactive_management_technology_software_development_kit+2EPSS score0.47%
Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.CVE-2022-38056intelendpoint_management_assistantEPSS score0.15%
Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially enable escalation of privilege via network access.CVE-2022-45128intelendpoint_management_assistantEPSS score0.16%
Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.CVE-2022-30297intelendpoint_management_assistantEPSS score0.18%
Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2024-32483intelendpoint_management_assistantEPSS score0.17%
Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.