CVE-2022-29871

HIGH 7.8CVE-2022-29871 · Published 11/08/2023 · updated 17/06/2026

In short

CVE-2022-29871 is a HIGH (CVSS 7.8) vulnerability affecting converged security management engine firmware (intel).
Chance of exploitation in the next 30 days (EPSS): 0.15%, higher than 4.5% of all vulnerabilities.
Fix: update to 14.5.50, 11.12.94, 11.22.94, 11.8.94 or later.

Package	Affected versions	Patched versions
converged security management engine firmware intel	`≥ 14.5.0, < 14.5.50< 11.12.94< 11.22.94< 11.8.94< 12.0.93< 13.0.65< 13.30.35< 13.50.25< 14.1.70< 15.0.45< 16.1.27< 3.1.94< 4.0.48`	`14.5.5011.12.9411.22.9411.8.9412.0.9313.0.6513.30.3513.50.2514.1.7015.0.4516.1.273.1.944.0.48`

Description

Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

References

More vulnerabilities in converged security management engine firmware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

converged security management engine firmware

intel

≥ 14.5.0, < 14.5.50< 11.12.94< 11.22.94< 11.8.94< 12.0.93< 13.0.65< 13.30.35< 13.50.25< 14.1.70< 15.0.45< 16.1.27< 3.1.94< 4.0.48

14.5.5011.12.9411.22.9411.8.9412.0.9313.0.6513.30.3513.50.2514.1.7015.0.4516.1.273.1.944.0.48

More vulnerabilities in converged security management engine firmware

See all →