CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2022-29871
High (7.8) in intel converged security management engine firmware. EPSS 0.2% chance of exploitation in the next 30 days.
Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-284, CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:converged_security_management_engine_firmware