CVE-2026-20715

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Intel Active Management Technology Firmware

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20715

EUVD

EUVD-2026-56475

Affected Vendors & Products

Vendor	Product	Version / Range
intel	active_management_technology	*
intel	standard_manageability	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper input validation in firmware for Intel Active Management Technology (AMT) and Intel Standard Manageability. It allows a denial of service attack via network access without authentication or user interaction. The attack has low complexity and requires no special internal knowledge.

Detection Guidance

Detection of CVE-2026-20715 requires checking for Intel AMT or Intel Standard Manageability firmware versions vulnerable to improper input validation. Use Intel's official tools like Intel Manageability Commander or AMT SDK to scan systems for affected firmware versions. Monitor network traffic for unusual patterns that may indicate a denial of service attempt targeting Intel AMT interfaces.

Impact Analysis

The vulnerability may cause a denial of service, making the affected system unavailable. It does not directly impact confidentiality or integrity but can disrupt system operations due to high availability impact.

Compliance Impact

This vulnerability primarily impacts system availability due to potential denial of service, which may indirectly affect compliance with standards like GDPR or HIPAA that require availability of personal or health data. However, the CVE does not provide specific details on compliance impacts or regulatory requirements.

Mitigation Strategies

Update Intel AMT and Intel Standard Manageability firmware to the latest versions provided by Intel to address the improper input validation issue.

Hi! I’m here to help you understand CVE-2026-20715. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70