Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-38102

Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.2, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 98 products from intel, from intel, from intel and 95 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-08-11T03:15:14.070

Last Modified

2026-06-17T04:56:06.577

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel converged_security_management_engine_firmware < 16.1.27 Yes
Hardware intel b660 - No
Hardware intel h610 - No
Hardware intel h610e - No
Hardware intel h670 - No
Hardware intel hm670 - No
Hardware intel q670 - No
Hardware intel q670e - No
Hardware intel r680e - No
Hardware intel w680 - No
Hardware intel wm690 - No
Hardware intel z690 - No
Operating System intel converged_security_management_engine_firmware < 15.0.45 Yes
Hardware intel atom_x6200fe - No
Hardware intel atom_x6211e - No
Hardware intel atom_x6212re - No
Hardware intel atom_x6214re - No
Hardware intel atom_x6413e - No
Hardware intel atom_x6414re - No
Hardware intel atom_x6416re - No
Hardware intel atom_x6425e - No
Hardware intel atom_x6425re - No
Hardware intel atom_x6427fe - No
Hardware intel b560 - No
Hardware intel c252 - No
Hardware intel c256 - No
Hardware intel celeron_j1750 - No
Hardware intel celeron_j1800 - No
Hardware intel celeron_j1850 - No
Hardware intel celeron_j1900 - No
Hardware intel celeron_j3060 - No
Hardware intel celeron_j3160 - No
Hardware intel celeron_j3355 - No
Hardware intel celeron_j3355e - No
Hardware intel celeron_j3455 - No
Hardware intel celeron_j3455e - No
Hardware intel celeron_j4005 - No
Hardware intel celeron_j4025 - No
Hardware intel celeron_j4105 - No
Hardware intel celeron_j4125 - No
Hardware intel celeron_j6412 - No
Hardware intel celeron_j6413 - No
Hardware intel celeron_n2805 - No
Hardware intel celeron_n2806 - No
Hardware intel celeron_n2807 - No
Hardware intel celeron_n2808 - No
Hardware intel celeron_n2810 - No
Hardware intel celeron_n2815 - No
Hardware intel celeron_n2820 - No
Hardware intel celeron_n2830 - No
Hardware intel celeron_n2840 - No
Hardware intel celeron_n2910 - No
Hardware intel celeron_n2920 - No
Hardware intel celeron_n2930 - No
Hardware intel celeron_n2940 - No
Hardware intel celeron_n3000 - No
Hardware intel celeron_n3010 - No
Hardware intel celeron_n3050 - No
Hardware intel celeron_n3060 - No
Hardware intel celeron_n3150 - No
Hardware intel celeron_n3160 - No
Hardware intel celeron_n3350 - No
Hardware intel celeron_n3350e - No
Hardware intel celeron_n3450 - No
Hardware intel celeron_n4000 - No
Hardware intel celeron_n4020 - No
Hardware intel celeron_n4100 - No
Hardware intel celeron_n4120 - No
Hardware intel celeron_n4500 - No
Hardware intel celeron_n4505 - No
Hardware intel celeron_n5100 - No
Hardware intel celeron_n5105 - No
Hardware intel celeron_n6210 - No
Hardware intel celeron_n6211 - No
Hardware intel h510 - No
Hardware intel h570 - No
Hardware intel hm570 - No
Hardware intel hm570e - No
Hardware intel pentium_j2850 - No
Hardware intel pentium_j2900 - No
Hardware intel pentium_j3710 - No
Hardware intel pentium_j4205 - No
Hardware intel pentium_j6426 - No
Hardware intel pentium_n3510 - No
Hardware intel pentium_n3520 - No
Hardware intel pentium_n3530 - No
Hardware intel pentium_n3540 - No
Hardware intel pentium_n3700 - No
Hardware intel pentium_n3710 - No
Hardware intel pentium_n4200 - No
Hardware intel pentium_n4200e - No
Hardware intel pentium_n6415 - No
Hardware intel q570 - No
Hardware intel qm580 - No
Hardware intel qm580e - No
Hardware intel rm590e - No
Hardware intel w580 - No
Hardware intel wm590 - No
Hardware intel z590 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.