Improper access control in Intel Endpoint Management Assistant (EMA) - CVE-2024-32483

Vulnerability identifier: #VU100662

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-32483

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.

Intel Endpoint Management Assistant (EMA)
ThinkPad T16 Gen 2 21HH
ThinkPad T14 Gen 4 21HD
ThinkPad T14 Gen 4 21HE
ThinkPad T14 Gen 5 21ML
ThinkPad T14 Gen 5 21MM
ThinkPad T14p Gen 2 21KU
ThinkPad T14s Gen 2 20WM
ThinkPad T14s Gen 2 20WN
ThinkPad T14s Gen 4 21F6
ThinkPad T14s Gen 4 21F7
ThinkPad T14s Gen 5 21LS
ThinkPad T14s Gen 5 21LT
ThinkPad T15 Gen 2 20W4
ThinkPad T15 Gen 2 20W5
ThinkPad T14 Gen 2 20W1
ThinkPad T16 Gen 2 21HJ
ThinkPad T16 Gen 3 21MN
ThinkPad T16 Gen 3 21MQ
ThinkPad X13 2-in-1 Gen 5 21LW
ThinkPad X13 2-in-1 Gen 5 21LX
ThinkPad X13 Gen 2 20WK
ThinkPad X13 Gen 2 20WL
ThinkPad X13 Gen 4 21EX
ThinkPad X13 Gen 4 21EY
ThinkPad X13 Gen 5 21LU
ThinkPad X13 Gen 5 21LV
ThinkPad X13 Yoga Gen 4 21F2
ThinkPad X13 Yoga Gen 4 21F3
ThinkPad P15s Gen 2 20W6
ThinkPad P14s Gen 2 20VX
ThinkPad P14s Gen 2 20VY
ThinkPad P14s Gen 4 21HF
ThinkPad P14s Gen 4 21HG
ThinkPad P14s Gen 5 21G2
ThinkPad P14s Gen 5 21G3
ThinkPad P15s Gen 2 20W7
ThinkPad P16 Gen 2 21FA
ThinkPad P16 Gen 2 21FB
ThinkPad P16s Gen 2 21HK
ThinkPad P16s Gen 2 21HL
ThinkPad P16s Gen 3 21KS
ThinkPad P16s Gen 3 21KT
ThinkPad P16v Gen 1 21FC
ThinkPad P16v Gen 1 21FD
ThinkPad P16v Gen 2 21KX
ThinkPad P16v Gen 2 21KY
ThinkPad T14 Gen 2 20W0
Intel Management Engine Software for Windows 11 (Version 21H2 or later), 10 (Version 21H2 or later) - ThinkPad
Intel Management Engine Software for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad P14s Gen 5 (Type 21G2, 21G3), P16s Gen 3 (Type 21KS, 21KT)
Intel Management Engine 16.x Software for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16 Gen 2 (Type 21FA, 21FB)
Intel Management Engine 16.x Software for Windows 11 (Version 21H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FC, 21FD)
Intel Management Engine Software for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad P16v Gen 2 (Type 21KX, 21KY)
Intel Management Engine Software for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad
Intel Management Engine Software for Windows 11 (Version 22H2 or later), 10 (Version 21H2 or later) - ThinkPad X13 2-in-1 Gen 5, X13 Gen 5
Intel Management Engine Software for Windows 11 (Version 21H2 or later), 10 (Version 1909 or later) - ThinkPad

Install updates from vendor's website.

Intel Endpoint Management Assistant (EMA) - update to 1.13.1.0

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01201.html

• Improper access control in Intel EMA Software
• Multiple vulnerabilities in Lenovo Intel EMA Software