7.5

CVE-2022-36392

Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Converged Security Management Engine Firmware Version < 11.12.94
   Intel ≫ C232 Version -
   Intel ≫ C236 Version -
   Intel ≫ C420 Version -
   Intel ≫ C422 Version -
   Intel ≫ Cm236 Version -
   Intel ≫ Cm238 Version -
   Intel ≫ X299 Version -
Intel ≫ Converged Security Management Engine Firmware Version < 11.8.94
   Intel ≫ B150 Version -
   Intel ≫ B250 Version -
   Intel ≫ Core I3-8100 Version -
   Intel ≫ Core I3-8100b Version -
   Intel ≫ Core I3-8100h Version -
   Intel ≫ Core I3-8100t Version -
   Intel ≫ Core I3-8109u Version -
   Intel ≫ Core I3-8130u Version -
   Intel ≫ Core I3-8140u Version -
   Intel ≫ Core I3-8145u Version -
   Intel ≫ Core I3-8145ue Version -
   Intel ≫ Core I3-8300 Version -
   Intel ≫ Core I3-8300t Version -
   Intel ≫ Core I3-8350k Version -
   Intel ≫ Core I5-8200y Version -
   Intel ≫ Core I5-8210y Version -
   Intel ≫ Core I5-8250u Version -
   Intel ≫ Core I5-8257u Version -
   Intel ≫ Core I5-8259u Version -
   Intel ≫ Core I5-8260u Version -
   Intel ≫ Core I5-8265u Version -
   Intel ≫ Core I5-8269u Version -
   Intel ≫ Core I5-8279u Version -
   Intel ≫ Core I5-8300h Version -
   Intel ≫ Core I5-8305g Version -
   Intel ≫ Core I5-8310y Version -
   Intel ≫ Core I5-8350u Version -
   Intel ≫ Core I5-8365u Version -
   Intel ≫ Core I5-8365ue Version -
   Intel ≫ Core I5-8400 Version -
   Intel ≫ Core I5-8400b Version -
   Intel ≫ Core I5-8400h Version -
   Intel ≫ Core I5-8400t Version -
   Intel ≫ Core I5-8500 Version -
   Intel ≫ Core I5-8500b Version -
   Intel ≫ Core I5-8500t Version -
   Intel ≫ Core I5-8600 Version -
   Intel ≫ Core I5-8600k Version -
   Intel ≫ Core I5-8600t Version -
   Intel ≫ Core I7+8700 Version -
   Intel ≫ Core I7-8086k Version -
   Intel ≫ Core I7-8500y Version -
   Intel ≫ Core I7-8550u Version -
   Intel ≫ Core I7-8557u Version -
   Intel ≫ Core I7-8559u Version -
   Intel ≫ Core I7-8565u Version -
   Intel ≫ Core I7-8569u Version -
   Intel ≫ Core I7-8650u Version -
   Intel ≫ Core I7-8665u Version -
   Intel ≫ Core I7-8665ue Version -
   Intel ≫ Core I7-8700 Version -
   Intel ≫ Core I7-8700b Version -
   Intel ≫ Core I7-8700k Version -
   Intel ≫ Core I7-8700t Version -
   Intel ≫ Core I7-8705g Version -
   Intel ≫ Core I7-8706g Version -
   Intel ≫ Core I7-8709g Version -
   Intel ≫ Core I7-8750h Version -
   Intel ≫ Core I7-8809g Version -
   Intel ≫ Core I7-8850h Version -
   Intel ≫ Core I9-8950hk Version -
   Intel ≫ Core M3-8100y Version -
   Intel ≫ H110 Version -
   Intel ≫ H170 Version -
   Intel ≫ H270 Version -
   Intel ≫ Hm170 Version -
   Intel ≫ Hm175 Version -
   Intel ≫ Q150 Version -
   Intel ≫ Q170 Version -
   Intel ≫ Q250 Version -
   Intel ≫ Q270 Version -
   Intel ≫ Qm170 Version -
   Intel ≫ Qm175 Version -
   Intel ≫ X299 Version -
   Intel ≫ Z170 Version -
   Intel ≫ Z270 Version -
Intel ≫ Converged Security Management Engine Firmware Version < 12.0.93
   Intel ≫ B360 Version -
   Intel ≫ B365 Version -
   Intel ≫ C242 Version -
   Intel ≫ C246 Version -
   Intel ≫ Celeron 4205u Version -
   Intel ≫ Celeron 4305u Version -
   Intel ≫ Celeron 4305ue Version -
   Intel ≫ Cm246 Version -
   Intel ≫ Core I3-8100 Version -
   Intel ≫ Core I3-8100b Version -
   Intel ≫ Core I3-8100h Version -
   Intel ≫ Core I3-8100t Version -
   Intel ≫ Core I3-8109u Version -
   Intel ≫ Core I3-8130u Version -
   Intel ≫ Core I3-8140u Version -
   Intel ≫ Core I3-8145u Version -
   Intel ≫ Core I3-8145ue Version -
   Intel ≫ Core I3-8300 Version -
   Intel ≫ Core I3-8300t Version -
   Intel ≫ Core I3-8350k Version -
   Intel ≫ Core I5-8200y Version -
   Intel ≫ Core I5-8210y Version -
   Intel ≫ Core I5-8250u Version -
   Intel ≫ Core I5-8257u Version -
   Intel ≫ Core I5-8259u Version -
   Intel ≫ Core I5-8260u Version -
   Intel ≫ Core I5-8265u Version -
   Intel ≫ Core I5-8269u Version -
   Intel ≫ Core I5-8279u Version -
   Intel ≫ Core I5-8300h Version -
   Intel ≫ Core I5-8305g Version -
   Intel ≫ Core I5-8310y Version -
   Intel ≫ Core I5-8350u Version -
   Intel ≫ Core I5-8365u Version -
   Intel ≫ Core I5-8365ue Version -
   Intel ≫ Core I5-8400 Version -
   Intel ≫ Core I5-8400b Version -
   Intel ≫ Core I5-8400h Version -
   Intel ≫ Core I5-8400t Version -
   Intel ≫ Core I5-8500 Version -
   Intel ≫ Core I5-8500b Version -
   Intel ≫ Core I5-8500t Version -
   Intel ≫ Core I5-8600 Version -
   Intel ≫ Core I5-8600k Version -
   Intel ≫ Core I5-8600t Version -
   Intel ≫ Core I7+8700 Version -
   Intel ≫ Core I7-8086k Version -
   Intel ≫ Core I7-8500y Version -
   Intel ≫ Core I7-8550u Version -
   Intel ≫ Core I7-8557u Version -
   Intel ≫ Core I7-8559u Version -
   Intel ≫ Core I7-8565u Version -
   Intel ≫ Core I7-8569u Version -
   Intel ≫ Core I7-8650u Version -
   Intel ≫ Core I7-8665u Version -
   Intel ≫ Core I7-8665ue Version -
   Intel ≫ Core I7-8700 Version -
   Intel ≫ Core I7-8700b Version -
   Intel ≫ Core I7-8700k Version -
   Intel ≫ Core I7-8700t Version -
   Intel ≫ Core I7-8705g Version -
   Intel ≫ Core I7-8706g Version -
   Intel ≫ Core I7-8709g Version -
   Intel ≫ Core I7-8750h Version -
   Intel ≫ Core I7-8809g Version -
   Intel ≫ Core I7-8850h Version -
   Intel ≫ Core I9-8950hk Version -
   Intel ≫ Core M3-8100y Version -
   Intel ≫ H310 Version -
   Intel ≫ H370 Version -
   Intel ≫ Hm370 Version -
   Intel ≫ Pentium Gold 5405u Version -
   Intel ≫ Q370 Version -
   Intel ≫ Qm370 Version -
   Intel ≫ Z370 Version -
   Intel ≫ Z390 Version -
Intel ≫ Converged Security Management Engine Firmware Version < 14.1.70
   Intel ≫ B460 Version -
   Intel ≫ H410 Version -
   Intel ≫ H420e Version -
   Intel ≫ H470 Version -
   Intel ≫ Hm470 Version -
   Intel ≫ Q470 Version -
   Intel ≫ Q470e Version -
   Intel ≫ Qm480 Version -
   Intel ≫ W480 Version -
   Intel ≫ W480e Version -
   Intel ≫ Wm490 Version -
   Intel ≫ Z490 Version -
Intel ≫ Converged Security Management Engine Firmware Version >= 14.5.0 < 14.5.50
   Intel ≫ B460 Version -
   Intel ≫ H410 Version -
   Intel ≫ H420e Version -
   Intel ≫ H470 Version -
   Intel ≫ Hm470 Version -
   Intel ≫ Q470 Version -
   Intel ≫ Q470e Version -
   Intel ≫ Qm480 Version -
   Intel ≫ W480 Version -
   Intel ≫ W480e Version -
   Intel ≫ Wm490 Version -
   Intel ≫ Z490 Version -
Intel ≫ Converged Security Management Engine Firmware Version < 15.0.45
   Intel ≫ B560 Version -
   Intel ≫ H510 Version -
   Intel ≫ H570 Version -
   Intel ≫ Hm570 Version -
   Intel ≫ Hm570e Version -
   Intel ≫ Q570 Version -
   Intel ≫ Qm580 Version -
   Intel ≫ Qm580e Version -
   Intel ≫ Rm590e Version -
   Intel ≫ W580 Version -
   Intel ≫ Wm590 Version -
   Intel ≫ Z590 Version -
Intel ≫ Converged Security Management Engine Firmware Version < 16.1.27
   Intel ≫ B660 Version -
   Intel ≫ H610 Version -
   Intel ≫ H610e Version -
   Intel ≫ H670 Version -
   Intel ≫ Hm670 Version -
   Intel ≫ Q670 Version -
   Intel ≫ Q670e Version -
   Intel ≫ R680e Version -
   Intel ≫ W680 Version -
   Intel ≫ Wm690 Version -
   Intel ≫ Z690 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.472
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Intel 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230824-0002/