Input validation

2023-08-1103:15:00

PRIOn knowledge base

www.prio-n.com

intel firmware

input validation

denial of service

nvd

unauthenticated user

network access

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

Improper input validation in some firmware for Intel® AMT and Intel® Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel ® CSME may allow an unauthenticated user to potentially enable denial of service via network access.

CPENameOperatorVersion
converged_security_management_engine_firmwarelt11.12.94
converged_security_management_engine_firmwarelt11.8.94
converged_security_management_engine_firmwarelt12.0.93
converged_security_management_engine_firmwarelt14.1.70
converged_security_management_engine_firmwarege14.5.0
converged_security_management_engine_firmwarelt14.5.50
converged_security_management_engine_firmwarelt15.0.45
converged_security_management_engine_firmwarelt16.1.27

Name	Operator	Version
converged_security_management_engine_firmware	lt	11.12.94
converged_security_management_engine_firmware	lt	11.8.94
converged_security_management_engine_firmware	lt	12.0.93
converged_security_management_engine_firmware	lt	14.1.70
converged_security_management_engine_firmware	ge	14.5.0
converged_security_management_engine_firmware	lt	14.5.50
converged_security_management_engine_firmware	lt	15.0.45
converged_security_management_engine_firmware	lt	16.1.27