Improper Input Validation in Intel AMT and Standard Manageability Firmware
CVE-2022-36392

8.6HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Amt And Intel(r) Standard Manageability In Intel (r) Csme
Vendor
CVE Published:
11 August 2023

What is CVE-2022-36392?

The vulnerability arises from improper input validation present in specific firmware versions for Intel(R) AMT and Intel(R) Standard Manageability. This flaw may allow an unauthenticated user to perform actions that could result in a denial of service via network access, potentially disrupting the functionality of affected systems. Users and administrators should ensure their firmware is updated to the latest versions to mitigate this risk and maintain secure operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) AMT and Intel(R) Standard Manageability in Intel (R) CSME before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27

References

http://www.intel.com/content/www/us/en/security-center/ad...
https://security.netapp.com/advisory/ntap-20230824-0002/

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.