CVE-2020-12354

7.8 highEPSS 0.3%

High (7.8) in intel active management technology software development kit. EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2020-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intel:active_management_technology_software_development_kit

References

https://security.netapp.com/advisory/ntap-20201113-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
https://security.netapp.com/advisory/ntap-20201113-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

Check your stack JSON