High severity7.2NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2022-38102

Description

Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Intel/Converged Security and Management Engine (CSME) Firmwarecpe-rescue
Intel/Converged Security Management Enginellm-fuzzy
Range: <15.0.45, <16.1.27
Intel/Converged Security Management Engine Firmware
cpe:2.3:o:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Range: <16.1.27

Patches

Vulnerability mechanics

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.htmlnvdVendor Advisory
security.netapp.com/advisory/ntap-20230824-0002/nvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000