CVE-2026-20715
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Improper input validation in firmware for Intel Active Management Technology (AMT) and Intel Standard Manageability may allow a denial of service. A network adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via network access. The vulnerability impacts availability (high), with no impact on confidentiality or integrity.
Risk Assessment
It is possible to cause unavailability of remote management features, potentially disrupting IT operations. The attack does not require authentication, increasing the risk.
Recommendation
It is recommended to update Intel AMT/Standard Manageability firmware to the latest version. Also restrict network access to these features.
Original NVD description (English source)
Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.