CVE-2022-29871 : Improper access control in the Intel(R) CSME software installer before version 2

Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Published 2023-08-11 03:15:12

Updated 2023-08-22 16:15:51

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2022-29871

Intel » Converged Security Management Engine Firmware
Versions before (<) 11.12.94
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » C232 » Version: N/A
When used together with: Intel » C236 » Version: N/A
When used together with: Intel » C420 » Version: N/A
When used together with: Intel » C422 » Version: N/A
When used together with: Intel » Cm236 » Version: N/A
When used together with: Intel » Cm238 » Version: N/A
When used together with: Intel » X299 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions before (<) 11.8.94
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » B150 » Version: N/A
When used together with: Intel » B250 » Version: N/A
When used together with: Intel » Core I3-8100 » Version: N/A
When used together with: Intel » Core I3-8100b » Version: N/A
When used together with: Intel » Core I3-8100h » Version: N/A
When used together with: Intel » Core I3-8100t » Version: N/A
When used together with: Intel » Core I3-8109u » Version: N/A
When used together with: Intel » Core I3-8130u » Version: N/A
When used together with: Intel » Core I3-8140u » Version: N/A
When used together with: Intel » Core I3-8145u » Version: N/A
When used together with: Intel » Core I3-8145ue » Version: N/A
When used together with: Intel » Core I3-8300 » Version: N/A
When used together with: Intel » Core I3-8300t » Version: N/A
When used together with: Intel » Core I3-8350k » Version: N/A
When used together with: Intel » Core I5-8200y » Version: N/A
When used together with: Intel » Core I5-8210y » Version: N/A
When used together with: Intel » Core I5-8250u » Version: N/A
When used together with: Intel » Core I5-8257u » Version: N/A
When used together with: Intel » Core I5-8259u » Version: N/A
When used together with: Intel » Core I5-8260u » Version: N/A
When used together with: Intel » Core I5-8265u » Version: N/A
When used together with: Intel » Core I5-8269u » Version: N/A
When used together with: Intel » Core I5-8279u » Version: N/A
When used together with: Intel » Core I5-8300h » Version: N/A
When used together with: Intel » Core I5-8305g » Version: N/A
When used together with: Intel » Core I5-8310y » Version: N/A
When used together with: Intel » Core I5-8350u » Version: N/A
When used together with: Intel » Core I5-8365u » Version: N/A
When used together with: Intel » Core I5-8365ue » Version: N/A
When used together with: Intel » Core I5-8400 » Version: N/A
When used together with: Intel » Core I5-8400b » Version: N/A
When used together with: Intel » Core I5-8400h » Version: N/A
When used together with: Intel » Core I5-8400t » Version: N/A
When used together with: Intel » Core I5-8500 » Version: N/A
When used together with: Intel » Core I5-8500b » Version: N/A
When used together with: Intel » Core I5-8500t » Version: N/A
When used together with: Intel » Core I5-8600 » Version: N/A
When used together with: Intel » Core I5-8600k » Version: N/A
When used together with: Intel » Core I5-8600t » Version: N/A
When used together with: Intel » Core I7+8700 » Version: N/A
When used together with: Intel » Core I7-8086k » Version: N/A
When used together with: Intel » Core I7-8500y » Version: N/A
When used together with: Intel » Core I7-8550u » Version: N/A
When used together with: Intel » Core I7-8557u » Version: N/A
When used together with: Intel » Core I7-8559u » Version: N/A
When used together with: Intel » Core I7-8565u » Version: N/A
When used together with: Intel » Core I7-8569u » Version: N/A
When used together with: Intel » Core I7-8650u » Version: N/A
When used together with: Intel » Core I7-8665u » Version: N/A
When used together with: Intel » Core I7-8665ue » Version: N/A
When used together with: Intel » Core I7-8700 » Version: N/A
When used together with: Intel » Core I7-8700b » Version: N/A
When used together with: Intel » Core I7-8700k » Version: N/A
When used together with: Intel » Core I7-8700t » Version: N/A
When used together with: Intel » Core I7-8705g » Version: N/A
When used together with: Intel » Core I7-8706g » Version: N/A
When used together with: Intel » Core I7-8709g » Version: N/A
When used together with: Intel » Core I7-8750h » Version: N/A
When used together with: Intel » Core I7-8809g » Version: N/A
When used together with: Intel » Core I7-8850h » Version: N/A
When used together with: Intel » Core I9-8950hk » Version: N/A
When used together with: Intel » Core M3-8100y » Version: N/A
When used together with: Intel » H110 » Version: N/A
When used together with: Intel » H170 » Version: N/A
When used together with: Intel » H270 » Version: N/A
When used together with: Intel » Hm170 » Version: N/A
When used together with: Intel » Hm175 » Version: N/A
When used together with: Intel » Q150 » Version: N/A
When used together with: Intel » Q170 » Version: N/A
When used together with: Intel » Q250 » Version: N/A
When used together with: Intel » Q270 » Version: N/A
When used together with: Intel » Qm170 » Version: N/A
When used together with: Intel » Qm175 » Version: N/A
When used together with: Intel » X299 » Version: N/A
When used together with: Intel » Z170 » Version: N/A
When used together with: Intel » Z270 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions from including (>=) 14.5.0 and before (<) 14.5.50
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » B460 » Version: N/A
When used together with: Intel » H410 » Version: N/A
When used together with: Intel » H420e » Version: N/A
When used together with: Intel » H470 » Version: N/A
When used together with: Intel » Hm470 » Version: N/A
When used together with: Intel » Q470 » Version: N/A
When used together with: Intel » Q470e » Version: N/A
When used together with: Intel » Qm480 » Version: N/A
When used together with: Intel » W480 » Version: N/A
When used together with: Intel » W480e » Version: N/A
When used together with: Intel » Wm490 » Version: N/A
When used together with: Intel » Z490 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions before (<) 11.22.94
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 12.0.93
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » B360 » Version: N/A
When used together with: Intel » B365 » Version: N/A
When used together with: Intel » C242 » Version: N/A
When used together with: Intel » C246 » Version: N/A
When used together with: Intel » Celeron 4205u » Version: N/A
When used together with: Intel » Celeron 4305u » Version: N/A
When used together with: Intel » Celeron 4305ue » Version: N/A
When used together with: Intel » Cm246 » Version: N/A
When used together with: Intel » Core I3-8100 » Version: N/A
When used together with: Intel » Core I3-8100b » Version: N/A
When used together with: Intel » Core I3-8100h » Version: N/A
When used together with: Intel » Core I3-8100t » Version: N/A
When used together with: Intel » Core I3-8109u » Version: N/A
When used together with: Intel » Core I3-8130u » Version: N/A
When used together with: Intel » Core I3-8140u » Version: N/A
When used together with: Intel » Core I3-8145u » Version: N/A
When used together with: Intel » Core I3-8145ue » Version: N/A
When used together with: Intel » Core I3-8300 » Version: N/A
When used together with: Intel » Core I3-8300t » Version: N/A
When used together with: Intel » Core I3-8350k » Version: N/A
When used together with: Intel » Core I5-8200y » Version: N/A
When used together with: Intel » Core I5-8210y » Version: N/A
When used together with: Intel » Core I5-8250u » Version: N/A
When used together with: Intel » Core I5-8257u » Version: N/A
When used together with: Intel » Core I5-8259u » Version: N/A
When used together with: Intel » Core I5-8260u » Version: N/A
When used together with: Intel » Core I5-8265u » Version: N/A
When used together with: Intel » Core I5-8269u » Version: N/A
When used together with: Intel » Core I5-8279u » Version: N/A
When used together with: Intel » Core I5-8300h » Version: N/A
When used together with: Intel » Core I5-8305g » Version: N/A
When used together with: Intel » Core I5-8310y » Version: N/A
When used together with: Intel » Core I5-8350u » Version: N/A
When used together with: Intel » Core I5-8365u » Version: N/A
When used together with: Intel » Core I5-8365ue » Version: N/A
When used together with: Intel » Core I5-8400 » Version: N/A
When used together with: Intel » Core I5-8400b » Version: N/A
When used together with: Intel » Core I5-8400h » Version: N/A
When used together with: Intel » Core I5-8400t » Version: N/A
When used together with: Intel » Core I5-8500 » Version: N/A
When used together with: Intel » Core I5-8500b » Version: N/A
When used together with: Intel » Core I5-8500t » Version: N/A
When used together with: Intel » Core I5-8600 » Version: N/A
When used together with: Intel » Core I5-8600k » Version: N/A
When used together with: Intel » Core I5-8600t » Version: N/A
When used together with: Intel » Core I7+8700 » Version: N/A
When used together with: Intel » Core I7-8086k » Version: N/A
When used together with: Intel » Core I7-8500y » Version: N/A
When used together with: Intel » Core I7-8550u » Version: N/A
When used together with: Intel » Core I7-8557u » Version: N/A
When used together with: Intel » Core I7-8559u » Version: N/A
When used together with: Intel » Core I7-8565u » Version: N/A
When used together with: Intel » Core I7-8569u » Version: N/A
When used together with: Intel » Core I7-8650u » Version: N/A
When used together with: Intel » Core I7-8665u » Version: N/A
When used together with: Intel » Core I7-8665ue » Version: N/A
When used together with: Intel » Core I7-8700 » Version: N/A
When used together with: Intel » Core I7-8700b » Version: N/A
When used together with: Intel » Core I7-8700k » Version: N/A
When used together with: Intel » Core I7-8700t » Version: N/A
When used together with: Intel » Core I7-8705g » Version: N/A
When used together with: Intel » Core I7-8706g » Version: N/A
When used together with: Intel » Core I7-8709g » Version: N/A
When used together with: Intel » Core I7-8750h » Version: N/A
When used together with: Intel » Core I7-8809g » Version: N/A
When used together with: Intel » Core I7-8850h » Version: N/A
When used together with: Intel » Core I9-8950hk » Version: N/A
When used together with: Intel » Core M3-8100y » Version: N/A
When used together with: Intel » H310 » Version: N/A
When used together with: Intel » H370 » Version: N/A
When used together with: Intel » Hm370 » Version: N/A
When used together with: Intel » Pentium Gold 5405u » Version: N/A
When used together with: Intel » Q370 » Version: N/A
When used together with: Intel » Qm370 » Version: N/A
When used together with: Intel » Z370 » Version: N/A
When used together with: Intel » Z390 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions before (<) 14.1.70
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » B460 » Version: N/A
When used together with: Intel » H410 » Version: N/A
When used together with: Intel » H420e » Version: N/A
When used together with: Intel » H470 » Version: N/A
When used together with: Intel » Hm470 » Version: N/A
When used together with: Intel » Q470 » Version: N/A
When used together with: Intel » Q470e » Version: N/A
When used together with: Intel » Qm480 » Version: N/A
When used together with: Intel » W480 » Version: N/A
When used together with: Intel » W480e » Version: N/A
When used together with: Intel » Wm490 » Version: N/A
When used together with: Intel » Z490 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions before (<) 15.0.45
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6200fe » Version: N/A
When used together with: Intel » Atom X6211e » Version: N/A
When used together with: Intel » Atom X6212re » Version: N/A
When used together with: Intel » Atom X6214re » Version: N/A
When used together with: Intel » Atom X6413e » Version: N/A
When used together with: Intel » Atom X6414re » Version: N/A
When used together with: Intel » Atom X6416re » Version: N/A
When used together with: Intel » Atom X6425e » Version: N/A
When used together with: Intel » Atom X6425re » Version: N/A
When used together with: Intel » Atom X6427fe » Version: N/A
When used together with: Intel » B560 » Version: N/A
When used together with: Intel » C252 » Version: N/A
When used together with: Intel » C256 » Version: N/A
When used together with: Intel » Celeron J1750 » Version: N/A
When used together with: Intel » Celeron J1800 » Version: N/A
When used together with: Intel » Celeron J1850 » Version: N/A
When used together with: Intel » Celeron J1900 » Version: N/A
When used together with: Intel » Celeron J3060 » Version: N/A
When used together with: Intel » Celeron J3160 » Version: N/A
When used together with: Intel » Celeron J3355 » Version: N/A
When used together with: Intel » Celeron J3355e » Version: N/A
When used together with: Intel » Celeron J3455 » Version: N/A
When used together with: Intel » Celeron J3455e » Version: N/A
When used together with: Intel » Celeron J4005 » Version: N/A
When used together with: Intel » Celeron J4025 » Version: N/A
When used together with: Intel » Celeron J4105 » Version: N/A
When used together with: Intel » Celeron J4125 » Version: N/A
When used together with: Intel » Celeron J6412 » Version: N/A
When used together with: Intel » Celeron J6413 » Version: N/A
Intel » Converged Security Management Engine Firmware
Versions before (<) 13.50.25
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 13.30.35
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 3.1.94
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 4.0.48
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 16.1.27
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions
Intel » Converged Security Management Engine Firmware
Versions before (<) 13.0.65
cpe:2.3:a:intel:converged_security_management_engine_firmware:*:*:*:*:*:*:*:*
Matching versions

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

Exploit prediction scoring system (EPSS) score for CVE-2022-29871

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-29871

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.7	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H	0.8	5.9	Intel Corporation
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2022-29871

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00783.html

Access Denied
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-29871

Products affected by CVE-2022-29871

Exploit prediction scoring system (EPSS) score for CVE-2022-29871

CVSS scores for CVE-2022-29871

References for CVE-2022-29871