CVE-2022-36392

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-36392
Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20230824-0002/
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20230824-0002/
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:c232:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:c236:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:c420:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:c422:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm236:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm238:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:x299:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:b150:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:b250:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8109u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8130u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8140u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8145u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8145ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8300:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8300t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8350k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8200y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8210y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8250u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8257u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8259u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8260u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8265u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8269u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8279u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8300h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8305g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8310y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8350u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8365u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8365ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7\+8700:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8086k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8500y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8550u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8557u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8559u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8565u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8569u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8650u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8665u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8665ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8705g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8706g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8709g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8750h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8809g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8850h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i9-8950hk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_m3-8100y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h110:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h170:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h270:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm170:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm175:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q150:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q170:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q250:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q270:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm170:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm175:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:x299:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z170:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z270:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:b360:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:b365:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:c242:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:c246:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:celeron_4205u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:celeron_4305u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:celeron_4305ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm246:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8100t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8109u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8130u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8140u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8145u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8145ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8300:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8300t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-8350k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8200y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8210y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8250u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8257u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8259u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8260u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8265u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8269u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8279u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8300h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8305g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8310y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8350u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8365u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8365ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8400t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8500t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-8600t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7\+8700:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8086k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8500y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8550u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8557u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8559u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8565u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8569u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8650u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8665u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8665ue:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700k:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8700t:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8705g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8706g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8709g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8750h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8809g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8850h:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i9-8950hk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_m3-8100y:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h310:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h370:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm370:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:pentium_gold_5405u:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q370:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm370:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z370:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z390:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:b460:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h410:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h420e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h470:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm470:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q470:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q470e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm480:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:w480:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:w480e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wm490:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z490:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:b560:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h570:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm570:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm570e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q570:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm580:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:qm580e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:rm590e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:w580:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wm590:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z590:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:b660:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h610:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h610e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:h670:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:hm670:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q670:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:q670e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:r680e:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:w680:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wm690:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:z690:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:12

Type Values Removed Values Added
References () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html - Vendor Advisory () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html - Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20230824-0002/ - () https://security.netapp.com/advisory/ntap-20230824-0002/ -
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 8.6

17 Oct 2024, 15:35

Type Values Removed Values Added
CWE CWE-116
Summary
  • (es) La validación de entrada inadecuada en algunos firmware para Intel(R) AMT e Intel(R) Standard Manageability antes de las versiones 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45 y 16.1.27 en Intel (R) CSME puede permitir que un usuario no autenticado habilite potencialmente la denegación de servicio a través del acceso a la red.
Information

Published : 2023-08-11 03:15

Updated : 2024-11-21 07:12

NVD link : CVE-2022-36392

Mitre link : CVE-2022-36392

CVE.ORG link : CVE-2022-36392

JSON object : View

Products Affected

intel

  • core_i7-8086k
  • b460
  • core_i5-8365u
  • core_i5-8350u
  • core_i7-8569u
  • h670
  • core_i3-8300t
  • q570
  • b660
  • core_i3-8350k
  • h370
  • z590
  • h270
  • core_i7-8850h
  • z170
  • h110
  • qm370
  • z690
  • q470e
  • z370
  • core_i5-8600k
  • hm570e
  • c420
  • cm246
  • h420e
  • q670e
  • qm580
  • core_i7-8700t
  • core_i7-8559u
  • hm670
  • h410
  • core_i3-8100
  • core_i3-8145u
  • core_i5-8305g
  • x299
  • b365
  • core_i5-8257u
  • w480e
  • core_i3-8109u
  • wm490
  • h610
  • c236
  • c242
  • core_i5-8300h
  • hm170
  • qm170
  • hm370
  • core_i3-8130u
  • core_i7-8700b
  • q370
  • wm590
  • core_m3-8100y
  • rm590e
  • core_i5-8259u
  • celeron_4205u
  • core_i3-8145ue
  • core_i7-8750h
  • core_i5-8260u
  • c246
  • core_i5-8200y
  • core_i7\+8700
  • h570
  • z270
  • pentium_gold_5405u
  • core_i7-8809g
  • q250
  • h510
  • core_i5-8400t
  • b250
  • h470
  • core_i7-8557u
  • celeron_4305ue
  • core_i5-8365ue
  • hm570
  • core_i5-8310y
  • b560
  • core_i3-8300
  • qm480
  • core_i7-8709g
  • w480
  • h310
  • q670
  • cm238
  • core_i5-8600
  • core_i5-8500t
  • w580
  • core_i5-8500b
  • wm690
  • core_i5-8400
  • core_i9-8950hk
  • core_i7-8706g
  • core_i7-8565u
  • b150
  • q470
  • core_i3-8100h
  • qm175
  • h170
  • cm236
  • w680
  • celeron_4305u
  • core_i5-8250u
  • core_i7-8550u
  • core_i7-8705g
  • r680e
  • c422
  • converged_security_management_engine_firmware
  • core_i7-8700
  • core_i5-8400h
  • core_i5-8500
  • q270
  • core_i5-8600t
  • c232
  • core_i3-8100b
  • core_i5-8265u
  • z390
  • core_i7-8500y
  • core_i7-8665u
  • core_i3-8100t
  • z490
  • b360
  • core_i5-8279u
  • core_i7-8700k
  • core_i5-8210y
  • core_i5-8400b
  • core_i7-8650u
  • q150
  • core_i3-8140u
  • q170
  • h610e
  • hm175
  • core_i7-8665ue
  • qm580e
  • hm470
  • core_i5-8269u
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo CWE-116

Improper Encoding or Escaping of Output