CVE-2020-12354

—

CVSS 3.1

7.8 high

EPSS

<1%p27

Published

Nov 12, 2020 (Nov 12, 2020)

Modified

Jun 17, 2026

Description

Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendors: intel
Products: active management technology software development kit
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.