CVE Feed

    Dashboard / CVE / CVE-2022-36392

    CVE-2022-36392

    Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel (R) CSME may allow an unauthenticated user to potentially enable denial of service via network access.

    Published:Aug 11, 2023
    Last Modified:Feb 13, 2025
    EPS:Aug 11, 2023
    EPSS Score:0.00113
    CVSS Score:8.6

    Affected Products

    Vendor
    Intel
    Product
    B150
    Vendor
    Intel
    Product
    B250
    Vendor
    Intel
    Product
    B360
    Vendor
    Intel
    Product
    B365
    Vendor
    Intel
    Product
    B460
    Vendor
    Intel
    Product
    B560
    Vendor
    Intel
    Product
    B660
    Vendor
    Intel
    Product
    C232
    Vendor
    Intel
    Product
    C236
    Vendor
    Intel
    Product
    C242
    Vendor
    Intel
    Product
    C246
    Vendor
    Intel
    Product
    C420
    Vendor
    Intel
    Product
    C422
    Vendor
    Intel
    Product
    Celeron 4205u
    Vendor
    Intel
    Product
    Celeron 4305u
    Vendor
    Intel
    Product
    Celeron 4305ue
    Vendor
    Intel
    Product
    Cm236
    Vendor
    Intel
    Product
    Cm238
    Vendor
    Intel
    Product
    Cm246
    Vendor
    Intel
    Product
    Converged Security Management Engine Firmware
    Vendor
    Intel
    Product
    Core I3-8100
    Vendor
    Intel
    Product
    Core I3-8100b
    Vendor
    Intel
    Product
    Core I3-8100h
    Vendor
    Intel
    Product
    Core I3-8100t
    Vendor
    Intel
    Product
    Core I3-8109u
    Vendor
    Intel
    Product
    Core I3-8130u
    Vendor
    Intel
    Product
    Core I3-8140u
    Vendor
    Intel
    Product
    Core I3-8145u
    Vendor
    Intel
    Product
    Core I3-8145ue
    Vendor
    Intel
    Product
    Core I3-8300
    Vendor
    Intel
    Product
    Core I3-8300t
    Vendor
    Intel
    Product
    Core I3-8350k
    Vendor
    Intel
    Product
    Core I5-8200y
    Vendor
    Intel
    Product
    Core I5-8210y
    Vendor
    Intel
    Product
    Core I5-8250u
    Vendor
    Intel
    Product
    Core I5-8257u
    Vendor
    Intel
    Product
    Core I5-8259u
    Vendor
    Intel
    Product
    Core I5-8260u
    Vendor
    Intel
    Product
    Core I5-8265u
    Vendor
    Intel
    Product
    Core I5-8269u
    Vendor
    Intel
    Product
    Core I5-8279u
    Vendor
    Intel
    Product
    Core I5-8300h
    Vendor
    Intel
    Product
    Core I5-8305g
    Vendor
    Intel
    Product
    Core I5-8310y
    Vendor
    Intel
    Product
    Core I5-8350u
    Vendor
    Intel
    Product
    Core I5-8365u
    Vendor
    Intel
    Product
    Core I5-8365ue
    Vendor
    Intel
    Product
    Core I5-8400
    Vendor
    Intel
    Product
    Core I5-8400b
    Vendor
    Intel
    Product
    Core I5-8400h
    Vendor
    Intel
    Product
    Core I5-8400t
    Vendor
    Intel
    Product
    Core I5-8500
    Vendor
    Intel
    Product
    Core I5-8500b
    Vendor
    Intel
    Product
    Core I5-8500t
    Vendor
    Intel
    Product
    Core I5-8600
    Vendor
    Intel
    Product
    Core I5-8600k
    Vendor
    Intel
    Product
    Core I5-8600t
    Vendor
    Intel
    Product
    Core I7-8086k
    Vendor
    Intel
    Product
    Core I7-8500y
    Vendor
    Intel
    Product
    Core I7-8550u
    Vendor
    Intel
    Product
    Core I7-8557u
    Vendor
    Intel
    Product
    Core I7-8559u
    Vendor
    Intel
    Product
    Core I7-8565u
    Vendor
    Intel
    Product
    Core I7-8569u
    Vendor
    Intel
    Product
    Core I7-8650u
    Vendor
    Intel
    Product
    Core I7-8665u
    Vendor
    Intel
    Product
    Core I7-8665ue
    Vendor
    Intel
    Product
    Core I7-8700
    Vendor
    Intel
    Product
    Core I7-8700b
    Vendor
    Intel
    Product
    Core I7-8700k
    Vendor
    Intel
    Product
    Core I7-8700t
    Vendor
    Intel
    Product
    Core I7-8705g
    Vendor
    Intel
    Product
    Core I7-8706g
    Vendor
    Intel
    Product
    Core I7-8709g
    Vendor
    Intel
    Product
    Core I7-8750h
    Vendor
    Intel
    Product
    Core I7-8809g
    Vendor
    Intel
    Product
    Core I7-8850h
    Vendor
    Intel
    Product
    Core I7\+8700
    Vendor
    Intel
    Product
    Core I9-8950hk
    Vendor
    Intel
    Product
    Core M3-8100y
    Vendor
    Intel
    Product
    H110
    Vendor
    Intel
    Product
    H170
    Vendor
    Intel
    Product
    H270
    Vendor
    Intel
    Product
    H310
    Vendor
    Intel
    Product
    H370
    Vendor
    Intel
    Product
    H410
    Vendor
    Intel
    Product
    H420e
    Vendor
    Intel
    Product
    H470
    Vendor
    Intel
    Product
    H510
    Vendor
    Intel
    Product
    H570
    Vendor
    Intel
    Product
    H610
    Vendor
    Intel
    Product
    H610e
    Vendor
    Intel
    Product
    H670
    Vendor
    Intel
    Product
    Hm170
    Vendor
    Intel
    Product
    Hm175
    Vendor
    Intel
    Product
    Hm370
    Vendor
    Intel
    Product
    Hm470
    Vendor
    Intel
    Product
    Hm570
    Vendor
    Intel
    Product
    Hm570e
    Vendor
    Intel
    Product
    Hm670
    Vendor
    Intel
    Product
    Pentium Gold 5405u
    Vendor
    Intel
    Product
    Q150
    Vendor
    Intel
    Product
    Q170
    Vendor
    Intel
    Product
    Q250
    Vendor
    Intel
    Product
    Q270
    Vendor
    Intel
    Product
    Q370
    Vendor
    Intel
    Product
    Q470
    Vendor
    Intel
    Product
    Q470e
    Vendor
    Intel
    Product
    Q570
    Vendor
    Intel
    Product
    Q670
    Vendor
    Intel
    Product
    Q670e
    Vendor
    Intel
    Product
    Qm170
    Vendor
    Intel
    Product
    Qm175
    Vendor
    Intel
    Product
    Qm370
    Vendor
    Intel
    Product
    Qm480
    Vendor
    Intel
    Product
    Qm580
    Vendor
    Intel
    Product
    Qm580e
    Vendor
    Intel
    Product
    R680e
    Vendor
    Intel
    Product
    Rm590e
    Vendor
    Intel
    Product
    W480
    Vendor
    Intel
    Product
    W480e
    Vendor
    Intel
    Product
    W580
    Vendor
    Intel
    Product
    W680
    Vendor
    Intel
    Product
    Wm490
    Vendor
    Intel
    Product
    Wm590
    Vendor
    Intel
    Product
    Wm690
    Vendor
    Intel
    Product
    X299
    Vendor
    Intel
    Product
    Z170
    Vendor
    Intel
    Product
    Z270
    Vendor
    Intel
    Product
    Z370
    Vendor
    Intel
    Product
    Z390
    Vendor
    Intel
    Product
    Z490
    Vendor
    Intel
    Product
    Z590
    Vendor
    Intel
    Product
    Z690
    Vendor
    Intel And Intel Standard Manageability In Intel Csme
    Product
    Intel And Intel Standard Manageability In Intel Csme

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-101 Server Side Include (SSI) Injection
    CAPEC-104 Cross Zone Scripting
    CAPEC-108 Command Line Execution through SQL Injection
    CAPEC-109 Object Relational Mapping Injection
    CAPEC-110 SQL Injection through SOAP Parameter Tampering
    CAPEC-120 Double Encoding
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-135 Format String Injection
    CAPEC-136 LDAP Injection
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-153 Input Data Manipulation
    CAPEC-182 Flash Injection
    CAPEC-209 XSS Using MIME Type Mismatch
    CAPEC-22 Exploiting Trust in Client
    CAPEC-23 File Content Injection
    CAPEC-230 Serialized Data with Nested Payloads
    CAPEC-231 Oversized Serialized Data Payloads
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-250 XML Injection
    CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-28 Fuzzing
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
    CAPEC-42 MIME Conversion
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-473 Signature Spoof
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-588 DOM-Based XSS
    CAPEC-63 Cross-Site Scripting (XSS)
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-664 Server Side Request Forgery
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-72 URL Encoding
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-81 Web Server Logs Tampering
    CAPEC-83 XPath Injection
    CAPEC-85 AJAX Footprinting
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High