Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00893.html