EUVD-2026-56480
GHSA-2f2p-7xv6-fcg6
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only access, high-privilege system software requirement, unchanged scope, and strictly confidentiality-only impact; CVSS 3.1 has no AT equivalent so the AT:P condition folds into implicit AC:L.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
2DescriptionCVE.org
Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Intel Active Management Technology (Intel AMT) and Intel Standard Manageability firmware contain an improper initialization flaw (CWE-665) that enables confidentiality compromise by a locally privileged system software adversary. The vulnerability arises when firmware fails to properly initialize memory or state, allowing residual data to be read by a subsequent privileged operation under specific attack conditions (AT:P per CVSS 4.0). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following conditions to be simultaneously satisfied: (1) Local physical or logical access to the target system - the AV:L vector explicitly excludes remote network exploitation; (2) A privileged user at the system software level (PR:H), meaning the attacker must already hold high-privilege OS or firmware-layer access before the AMT flaw can be leveraged; (3) Specific attack requirements (AT:P per CVSS 4.0) must be present - the exact configuration state, operational condition, or firmware context triggering the improper initialization is not precisely enumerated in the available data beyond the description's reference to 'attack requirements are present without special internal knowledge.' Exploitation is limited to confidentiality exposure only; integrity and availability are unaffected (VI:N/VA:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.6 accurately captures the constrained risk posture: local access vector (AV:L), a specific attack requirement (AT:P) beyond baseline access, and a high-privilege prerequisite (PR:H) collectively make opportunistic or automated mass exploitation implausible. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the firmware update identified in Intel Security Advisory INTEL-SA-01427, accessible at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01427.html; exact patched firmware version numbers must be confirmed directly from that advisory as they are not independently verifiable from the data provided here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-665 – Improper Initialization
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today