Medium severity6.7NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2022-29871

Description

Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Intel/Converged Security Management Engine Firmware
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Range: <11.12.94
Intel/CSME installer softwarellm-fuzzy
Range: <2239.3.7.0

Patches

Vulnerability mechanics

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.htmlnvdVendor Advisory
security.netapp.com/advisory/ntap-20230824-0002/nvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000