Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

CVE-2025-32008: Intel(R) AMT and Manageability Firmware Denial of Service Risk

CVE-2025-32008 · published 8 months ago
Summary

A security flaw in the firmware of Intel(R) AMT and Manageability could allow an attacker to shut down the system without needing a password. This could happen if an attacker is on the same network as the system and has the right tools. To protect your system, it's recommended to keep your firmware up to date with the latest security patches.

Original advisory text
Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticate...
Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published10 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
Track software like this
Free during beta