Intel has published a security advisory to address vulnerabilities affecting the following products on the 8th of November 2022. It is recommended that you take the necessary precautions to ensure your products are always protected.
Active Management Technology (AMT) multiple versions
Active Management Technology SDK versions prior to 16.0.4.1
Converged Security and Manageability Engine (CSME) multiple versions
Data Center Manager (DCM) versions prior to 5.0
Endpoint Management Assistant (EMA) versions prior to 1.7.1
Intel XMM 7560 Modem M.2 software versions prior to M2_7560_R_01.2146.00
Manageability Commander (MC) versions prior to 2.3.2
NUC BIOS firmware multiple platforms and versions
Processors multiple versions and models
Server Boards and Systems multiple versions and models
Server Platform Services (SPS) multiple versions
For more information on these updates, you can follow this URL:
https://www.intel.com/content/www/us/en/security-center/default.html
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Intel Security Advisory.pdf
References
Intel Product Security Center Advisories. (8th of November 2022) Reviewed from Intel:
https://www.intel.com/content/www/us/en/security-center/default.html
Intel Chrome security advisory (AV22-632). (10th of November 2022). Reviewed from Canadian Centre for Cyber Security:
https://cyber.gc.ca/en/alerts-advisories/intel-security-advisory-av22-632