Intel SA-01427 Advisory: Intel AMT Firmware Vulnerabilities (CVE-2026-20715/20708/20734)

2026.3 IPU, Intel® Chipset Firmware Advisory Vulnerability Overview Intel ID: INTEL-SA-01427 Vulnerability Type: Firmware Impact: Denial of Service, Information Disclosure Severity: High Original Release Date: 08/11/2026 Last Revision Date: 08/11/2026 Summary Potential security vulnerabilities in some Intel® Active Management Technology (Intel® AMT) and portions of Intel® Standard Manageability could allow for denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details CVEID: CVE-2026-20715 - Description: Improper input validation in some Intel® Active Management Technology (Intel® AMT) and portions of Intel® Standard Manageability firmware could allow for denial of service. A network attacker combining a low complexity attack could result in denial of service. This could occur without specialized access knowledge or user interaction. The vulnerability potentially impacts Confidentiality (None), Integrity (None), and Availability (High), resulting in subsequent system Confidentiality (None), Integrity (None), and Availability (None) impacts. - CVSS Base Score: 4.0: 8.2 High - CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:9/PR:N/UI:N/VC:N/VN:VH/A:SC:N/S:IN/S:AN CVEID: CVE-2026-20708 - Description: Improper sensitive information insertion in the logging of some Intel® AMT and Intel® Standard Manageability subsystems could allow for information disclosure. A network attacker combining a high complexity attack could result in data leakage. This could occur without specialized access knowledge or user interaction. The vulnerability potentially impacts Confidentiality (High), Integrity (None), and Availability (None), resulting in subsequent system Confidentiality (None), Integrity (None), and Availability (None) impacts. - CVSS Base Score: 4.0: 5.9 Medium - CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VN:V:N/SC:N/S:IN/S:AN CVEID: CVE-2026-20734 - Description: Improper initialization in some Intel® Active Management Technology (Intel® AMT) and portions of Intel® Standard Manageability firmware could allow for information disclosure. A system software attacker with privileged user access combining a low complexity attack could result in data leakage. This could occur without specialized access knowledge or user interaction. The vulnerability potentially impacts Confidentiality (High), Integrity (None), and Availability (None), resulting in subsequent system Confidentiality (None), Integrity (None), and Availability (None) impacts. - CVSS Base Score: 4.0: 5.6 Medium - CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VN:V:N/SC:N/S:IN/S:AN Affected Scope Affected Chipsets/SOCs: - Kaby Lake-H, Intel® C420 Chipset, Intel® X299 Chipset - Skylake-H, Intel® C230 Series Chipset, Kaby Lake-S, Intel® Xeon® E3 processor v6 family, Skylake-S, Intel® Xeon® E3 processor v5 family - Lewisburg, Intel® C620 series chipset, Cascade Lake, 2nd Gen Intel® Xeon® Scalable processor, Intel® Xeon® W processor 3200 series, Skylake Server, 1st Gen Intel® Xeon® Scalable processor, Intel® Xeon® W processor 3100 series - Amber Lake-Y, 8th Gen Intel® Core™ processor, 10th Generation Intel® Core™ Processor - Kaby Lake, Intel® 200 Series Chipset, Sunrise Point/Skylake, Intel® 100 Series Chipset, Kaby Lake-R, 8th Gen Intel Core Processor, Kaby Lake-S/H/U/Y, 7th Gen Intel® Core™ Processor, Intel Core X-series Processors - Sunrise Point/Skylake, Intel® 100 series chipset, Skylake-S/H/U/Y, 6th Gen Intel® Core™ processor - Cannon Lake, Intel® 300 Series Chipset, Coffee Lake-S/H, 9th Gen Intel® Core™ processor, 8th Gen Intel® Core™ processor, Intel Celeron Processor G Series, Intel Pentium Gold Processor Series - Cannon Lake-H, Intel® C240 Series Chipset, Coffee Lake-S, Intel® Xeon® E processor - Whiskey Lake-U, Cannon Lake-U, 8th Gen Intel® Core™ processor, Pentium® Gold processor series (G54XXU), Celeron® processor 4000 series - Comet Lake, Intel® 400 Series Chipset, Comet Lake-S/H/U/Y, 10th Gen Intel® Core™ processor, Intel® Xeon® W processor 10000/1200 series, Pentium® Gold processor series, Celeron® processor G series, Rocket Lake-S, 11th Gen Intel® Core™ processor, Intel® Xeon® W processor 1300 series - Tiger Lake, Intel® 500 Series Chipset, Tiger Lake-H/UP3/UP4, 11th Gen Intel® Core™ processor, Pentium® Gold processor series, Celeron® processor 6000 series - Rocket Lake, Intel® 500 Series Chipset, Intel® W580 Series Chipset, Rocket Lake-S, 11th Gen Intel® Core™ processor, Intel® Xeon® W processor 1300 series - Tiger Lake-H, Intel® C250 Series Chipset, Rocket Lake-S, Intel® Xeon® E processor - Emmitsburg, Intel® C740 series chipset, Sapphire Rapids, 4th Gen Intel® Xeon® Scalable processor, Sapphire Rapids Edge Enhanced, 4th and 5th Gen Intel® Xeon® Scalable processor, Emerald Rapids, 5th Gen Intel® Xeon® Scalable processor - Alder Lake P/H/HX/U/M/S, Intel® 600 Series Chipset, 12th Gen Intel® Core™ Processor, Intel Pentium® Gold Processor series, Intel Processor

Goal Reached Thanks to every supporter — we hit 100%!

Intel SA-01427 Advisory: Intel AMT Firmware Vulnerabilities (CVE-2026-20715/20708/20734)