7.2

CVE-2022-38102

Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Converged Security Management Engine Firmware Version < 16.1.27
   Intel ≫ B660 Version-
   Intel ≫ H610 Version-
   Intel ≫ H610e Version-
   Intel ≫ H670 Version-
   Intel ≫ Hm670 Version-
   Intel ≫ Q670 Version-
   Intel ≫ Q670e Version-
   Intel ≫ R680e Version-
   Intel ≫ W680 Version-
   Intel ≫ Wm690 Version-
   Intel ≫ Z690 Version-
Intel ≫ Converged Security Management Engine Firmware Version < 15.0.45
   Intel ≫ Atom X6200fe Version-
   Intel ≫ Atom X6211e Version-
   Intel ≫ Atom X6212re Version-
   Intel ≫ Atom X6214re Version-
   Intel ≫ Atom X6413e Version-
   Intel ≫ Atom X6414re Version-
   Intel ≫ Atom X6416re Version-
   Intel ≫ Atom X6425e Version-
   Intel ≫ Atom X6425re Version-
   Intel ≫ Atom X6427fe Version-
   Intel ≫ B560 Version-
   Intel ≫ C252 Version-
   Intel ≫ C256 Version-
   Intel ≫ Celeron J1750 Version-
   Intel ≫ Celeron J1800 Version-
   Intel ≫ Celeron J1850 Version-
   Intel ≫ Celeron J1900 Version-
   Intel ≫ Celeron J3060 Version-
   Intel ≫ Celeron J3160 Version-
   Intel ≫ Celeron J3355 Version-
   Intel ≫ Celeron J3355e Version-
   Intel ≫ Celeron J3455 Version-
   Intel ≫ Celeron J3455e Version-
   Intel ≫ Celeron J4005 Version-
   Intel ≫ Celeron J4025 Version-
   Intel ≫ Celeron J4105 Version-
   Intel ≫ Celeron J4125 Version-
   Intel ≫ Celeron J6412 Version-
   Intel ≫ Celeron J6413 Version-
   Intel ≫ Celeron N2805 Version-
   Intel ≫ Celeron N2806 Version-
   Intel ≫ Celeron N2807 Version-
   Intel ≫ Celeron N2808 Version-
   Intel ≫ Celeron N2810 Version-
   Intel ≫ Celeron N2815 Version-
   Intel ≫ Celeron N2820 Version-
   Intel ≫ Celeron N2830 Version-
   Intel ≫ Celeron N2840 Version-
   Intel ≫ Celeron N2910 Version-
   Intel ≫ Celeron N2920 Version-
   Intel ≫ Celeron N2930 Version-
   Intel ≫ Celeron N2940 Version-
   Intel ≫ Celeron N3000 Version-
   Intel ≫ Celeron N3010 Version-
   Intel ≫ Celeron N3050 Version-
   Intel ≫ Celeron N3060 Version-
   Intel ≫ Celeron N3150 Version-
   Intel ≫ Celeron N3160 Version-
   Intel ≫ Celeron N3350 Version-
   Intel ≫ Celeron N3350e Version-
   Intel ≫ Celeron N3450 Version-
   Intel ≫ Celeron N4000 Version-
   Intel ≫ Celeron N4020 Version-
   Intel ≫ Celeron N4100 Version-
   Intel ≫ Celeron N4120 Version-
   Intel ≫ Celeron N4500 Version-
   Intel ≫ Celeron N4505 Version-
   Intel ≫ Celeron N5100 Version-
   Intel ≫ Celeron N5105 Version-
   Intel ≫ Celeron N6210 Version-
   Intel ≫ Celeron N6211 Version-
   Intel ≫ H510 Version-
   Intel ≫ H570 Version-
   Intel ≫ Hm570 Version-
   Intel ≫ Hm570e Version-
   Intel ≫ Pentium J2850 Version-
   Intel ≫ Pentium J2900 Version-
   Intel ≫ Pentium J3710 Version-
   Intel ≫ Pentium J4205 Version-
   Intel ≫ Pentium J6426 Version-
   Intel ≫ Pentium N3510 Version-
   Intel ≫ Pentium N3520 Version-
   Intel ≫ Pentium N3530 Version-
   Intel ≫ Pentium N3540 Version-
   Intel ≫ Pentium N3700 Version-
   Intel ≫ Pentium N3710 Version-
   Intel ≫ Pentium N4200 Version-
   Intel ≫ Pentium N4200e Version-
   Intel ≫ Pentium N6415 Version-
   Intel ≫ Q570 Version-
   Intel ≫ Qm580 Version-
   Intel ≫ Qm580e Version-
   Intel ≫ Rm590e Version-
   Intel ≫ W580 Version-
   Intel ≫ Wm590 Version-
   Intel ≫ Z590 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.012
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
secure@intel.com 7.2 0.8 5.8
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.