Intel AMT EUVD-2026-56480

Q: What is the CVSS score of EUVD-2026-56480?

EUVD-2026-56480 has a CVSS 4.0 base score of 5.6 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-20734 MEDIUM

Improper Initialization (CWE-665)

2026-08-11 intel

GHSA-2f2p-7xv6-fcg6

Information Disclosure Intel N A Intel R Active Management Technology Intel R Amt And Some Intel R Standard Manageability May Allow An Information Disclosure System Software Adversary With A Privileged User Combined With A Low Complexity Attack May Enable Data Exposure This Result May Potentially Occur Via Local Access When Attack Requirements Are Present Without Special Internal Knowledge And Requires No User Interaction The Potential Vulnerability May Impact The Confidentiality High Integrity None And Availability None Of The Vulnerable System Resulting In Subsequent System Confidentiality None Integrity None And Availability None Impacts

5.6

CVSS 4.0 · Vendor: intel

Severity by source

Vendor (intel) PRIMARY

5.6 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.4 MEDIUM

Local-only access, high-privilege system software requirement, unchanged scope, and strictly confidentiality-only impact; CVSS 3.1 has no AT equivalent so the AT:P condition folds into implicit AC:L.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.0 AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 21:56 vuln.today

CVE Published

Aug 11, 2026 - 16:25 cve.org

MEDIUM 5.6

DescriptionCVE.org

Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

AnalysisAI

Intel Active Management Technology (Intel AMT) and Intel Standard Manageability firmware contain an improper initialization flaw (CWE-665) that enables confidentiality compromise by a locally privileged system software adversary. The vulnerability arises when firmware fails to properly initialize memory or state, allowing residual data to be read by a subsequent privileged operation under specific attack conditions (AT:P per CVSS 4.0). No CISA KEV listing exists and no public proof-of-concept has been identified; Intel reported this through their own security advisory program (INTEL-SA-01427) and the CVSS 4.0 base score of 5.6 reflects the constrained local, high-privilege exploitation prerequisites.

Technical ContextAI

Intel AMT is an out-of-band management subsystem embedded in Intel vPro-capable chipsets and processors, operating independently of the host OS via a dedicated Management Engine and network interface. Intel Standard Manageability is a restricted subset of AMT capabilities present on a broader range of Intel platforms. Because AMT operates below the OS layer, it can persist across reboots, OS reinstallation, and even certain power states, making firmware-level vulnerabilities strategically significant targets. CWE-665 (Improper Initialization) denotes a failure to initialize a resource, data structure, or variable prior to use, which can leave stale or sensitive data accessible to a subsequent read. In AMT firmware, such uninitialized data could include management credentials, provisioning state, or configuration material. The CVSS 4.0 vector AV:L/AC:L/AT:P/PR:H/UI:N confirms exploitation is local, requires a specific attack prerequisite (AT:P) beyond merely having access, and demands high-privilege system software context. The CPE data provided is structurally malformed - it embeds the vulnerability description as the product identifier rather than a proper cpe:2.3 version-scoped string - limiting automated version enumeration from this source; Intel's advisory is the authoritative source for affected product ranges.

RemediationAI

The primary remediation is to apply the firmware update identified in Intel Security Advisory INTEL-SA-01427, accessible at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01427.html; exact patched firmware version numbers must be confirmed directly from that advisory as they are not independently verifiable from the data provided here. Where immediate firmware updates are not feasible - for example, in air-gapped environments or systems requiring extended change-control cycles - disabling Intel AMT and Intel Standard Manageability entirely through BIOS/UEFI firmware settings eliminates the attack surface completely, at the cost of losing all out-of-band management capability including remote KVM, remote boot, and hardware health monitoring. An additional compensating control is enforcing strict least-privilege access policies to ensure that system-level privileged accounts on affected hosts are restricted to authorized personnel only, reducing the pool of potential adversaries who could satisfy the PR:H prerequisite. Organizations should validate affected firmware versions against the Intel advisory before deploying patches, and given the low-level nature of firmware updates, test in a representative non-production environment prior to broad rollout to detect any platform-specific compatibility issues.