CVE-2022-38102

Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.

Score

CVSS 3.1 7.2 High

Status

Modified - secure@intel.com

Published

2023-08-11

Last modified

2025-02-13

Weaknesses

CWE-20

Affected products

• Converged Security Management Engine Firmware (Intel)

References

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html
• https://security.netapp.com/advisory/ntap-20230824-0002/