CVE-2022-36392 — Improper Input Validation in Intel Converged Security Management Engine Firmware

CWE-20 — Improper Input ValidationCWE-116 — Improper Encoding or Escaping of Output3 documents3 sources
Severity
7.5HIGHNVD
CNA8.6
EPSS
0.2%
top 62.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Converged Security Management Engine Firmware
Timeline
PublishedAug 11

Description

Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2022-36392: Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11↗2023-08-11
▶
GHSA
GHSA-c8rw-rc58-gq7x: Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11↗2023-08-11
▶
CVE-2022-36392 — Improper Input Validation in Intel | cvebase