Vulnerability Intelligence Report
CVE-2022-38102
Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.
No Active Exploit Signals
CVSS Base Score
7.2
HIGH
Exploitability:0.9
Impact Score:5.8
EPSS Probability:0.20%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-20 ↗Improper Input validation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| intel | converged_security_management_engine_firmware | all |
| intel | b660 | all |
| intel | h610 | all |
| intel | h610e | all |
| intel | h670 | all |
| intel | hm670 | all |
| intel | q670 | all |
| intel | q670e | all |
| intel | r680e | all |
| intel | w680 | all |
| intel | wm690 | all |
| intel | z690 | all |
| intel | atom_x6200fe | all |
| intel | atom_x6211e | all |
| intel | atom_x6212re | all |
| intel | atom_x6214re | all |
| intel | atom_x6413e | all |
| intel | atom_x6414re | all |
| intel | atom_x6416re | all |
| intel | atom_x6425e | all |
| intel | atom_x6425re | all |
| intel | atom_x6427fe | all |
| intel | b560 | all |
| intel | c252 | all |
| intel | c256 | all |
| intel | celeron_j1750 | all |
| intel | celeron_j1800 | all |
| intel | celeron_j1850 | all |
| intel | celeron_j1900 | all |
| intel | celeron_j3060 | all |
| intel | celeron_j3160 | all |
| intel | celeron_j3355 | all |
| intel | celeron_j3355e | all |
| intel | celeron_j3455 | all |
| intel | celeron_j3455e | all |
| intel | celeron_j4005 | all |
| intel | celeron_j4025 | all |
| intel | celeron_j4105 | all |
| intel | celeron_j4125 | all |
| intel | celeron_j6412 | all |
| intel | celeron_j6413 | all |
| intel | celeron_n2805 | all |
| intel | celeron_n2806 | all |
| intel | celeron_n2807 | all |
| intel | celeron_n2808 | all |
| intel | celeron_n2810 | all |
| intel | celeron_n2815 | all |
| intel | celeron_n2820 | all |
| intel | celeron_n2830 | all |
| intel | celeron_n2840 | all |
| intel | celeron_n2910 | all |
| intel | celeron_n2920 | all |
| intel | celeron_n2930 | all |
| intel | celeron_n2940 | all |
| intel | celeron_n3000 | all |
| intel | celeron_n3010 | all |
| intel | celeron_n3050 | all |
| intel | celeron_n3060 | all |
| intel | celeron_n3150 | all |
| intel | celeron_n3160 | all |
| intel | celeron_n3350 | all |
| intel | celeron_n3350e | all |
| intel | celeron_n3450 | all |
| intel | celeron_n4000 | all |
| intel | celeron_n4020 | all |
| intel | celeron_n4100 | all |
| intel | celeron_n4120 | all |
| intel | celeron_n4500 | all |
| intel | celeron_n4505 | all |
| intel | celeron_n5100 | all |
| intel | celeron_n5105 | all |
| intel | celeron_n6210 | all |
| intel | celeron_n6211 | all |
| intel | h510 | all |
| intel | h570 | all |
| intel | hm570 | all |
| intel | hm570e | all |
| intel | pentium_j2850 | all |
| intel | pentium_j2900 | all |
| intel | pentium_j3710 | all |
| intel | pentium_j4205 | all |
| intel | pentium_j6426 | all |
| intel | pentium_n3510 | all |
| intel | pentium_n3520 | all |
| intel | pentium_n3530 | all |
| intel | pentium_n3540 | all |
| intel | pentium_n3700 | all |
| intel | pentium_n3710 | all |
| intel | pentium_n4200 | all |
| intel | pentium_n4200e | all |
| intel | pentium_n6415 | all |
| intel | q570 | all |
| intel | qm580 | all |
| intel | qm580e | all |
| intel | rm590e | all |
| intel | w580 | all |
| intel | wm590 | all |
| intel | z590 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.198%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Intel Corporation · Vendor · USA |
| Reserved | 2022-08-19T03:00:38 |
| Published | 2023-08-11T02:36:56 |
| Last Updated | 2025-02-13T16:32:58 |
Community Chatter & Buzz