CVEvulnerability

CVE-2022-29871

7.8 HIGH Published 2023-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284, CWE-863

Description

Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

• intel converged security management engine firmware (< 11.12.94) • intel converged security management engine firmware (< 11.8.94) • intel converged security management engine firmware (< 12.0.93) • intel converged security management engine firmware (< 14.1.70) • intel converged security management engine firmware (>= 14.5.0 < 14.5.50) • intel converged security management engine firmware (< 15.0.45) • intel converged security management engine firmware (< 16.1.27) • intel converged security management engine firmware (< 13.50.25) • intel converged security management engine firmware (< 13.30.35) • intel converged security management engine firmware (< 13.0.65) • intel converged security management engine firmware (< 11.22.94) • intel converged security management engine firmware (< 4.0.48) • intel converged security management engine firmware (< 3.1.94)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-863 Incorrect Authorization weakness

References