Description
Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Published: 2026-08-11
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the Intel(R) AMT and Intel(R) Standard Manageability subsystem, identified as CWE‑532, injects sensitive data into log files, causing an information disclosure that primarily threatens confidentiality with a CVSS score of 5.9.

Affected Systems

The vulnerability affects Intel AMT and Intel Standard Manageability components. No specific versions are listed in the advisory, so any deployment of these subsystems is potentially impacted.

Risk and Exploitability

The attacker must have network access and a privileged account, and the exploitation requires a high‑complexity attack but no user interaction. The EPSS score of < 1% indicates a very low probability of exploitation at this time, and the vulnerability is not listed in CISA's KEV catalog. Despite this low likelihood, the potential for sensitive data leakage warrants proactive monitoring and remediation.

Generated by OpenCVE AI on August 13, 2026 at 03:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply any Intel AMT security updates or patches that address the logging issue, ensuring mitigation of the CWE‑532 weakness.
  • Configure or restrict AMT logging to prevent recording of sensitive information, thereby mitigating the CWE‑532 vulnerability, if configuration options exist.
  • Limit network exposure of the AMT interface to trusted administrators only, using firewall rules or VPN access.
  • Continuously monitor AMT logs for unexpected or confidential entries and investigate promptly.

Generated by OpenCVE AI on August 13, 2026 at 03:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Intel
Intel intel Amt And Intel Standard Manageability
Vendors & Products Intel
Intel intel Amt And Intel Standard Manageability

Wed, 12 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 11 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Description Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Weaknesses CWE-532
References
Metrics cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}


Subscriptions

Intel Intel Amt And Intel Standard Manageability
cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published:

Updated: 2026-08-12T15:55:08.050Z

Reserved: 2025-12-03T17:58:55.158Z

Link: CVE-2026-20708

cve-icon Vulnrichment

Updated: 2026-08-12T15:55:04.495Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-11T17:17:49.500

Modified: 2026-08-12T20:54:11.500

Link: CVE-2026-20708

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T11:23:33Z

Weaknesses
  • CWE-532

    Insertion of Sensitive Information into Log File