CVE-2022-36392

CVSS 8.6 HIGHEPSS 0.6%CWE-116 CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.6EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Aug 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

n/a · Intel(R) AMT and Intel(R) Standard Manageability in Intel (R) CSME

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://security.netapp.com/advisory/ntap-20230824-0002/http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html