NULL pointer dereference in Converged Security and Management Engine (CSME) and Intel Active Management Technology - CVE-2022-27497

Vulnerability identifier: #VU69315

CSH Severity: High

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-27497

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in firmware. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Converged Security and Management Engine (CSME)
Intel Active Management Technology
HPE ProLiant DL20 Gen9 Server SPS
HPE ProLiant ML30 Gen9 Server SPS
HPE ProLiant MicroServer Gen10 Plus
HPE ProLiant DL20 Gen10 Plus server
HPE ProLiant ML30 Gen10 Plus server
EGW-5200

Install updates from vendor's website.

Converged Security and Management Engine (CSME) - addressed in versions 11.8.93, 11.12.93, 11.22.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25
Intel Active Management Technology - addressed in versions 11.8.93, 11.22.93, 12.0.92, 14.1.67, 15.0.42, 16.0
HPE ProLiant DL20 Gen9 Server SPS - update to SPS_E3_04.01.04.700.0
HPE ProLiant ML30 Gen9 Server SPS - update to SPS_E3_04.01.04.700.0
HPE ProLiant MicroServer Gen10 Plus - update to SPS_E3_06.00.03.204.0
HPE ProLiant DL20 Gen10 Plus server - update to SPS_E3_06.00.03.204.0
HPE ProLiant ML30 Gen10 Plus server - update to SPS_E3_06.00.03.204.0
EGW-5200 - update to 1.06.10 2V4

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html

• Multiple vulnerabilities in Intel Chipset Firmware
• Multiple vulnerabilities in Dell EGW-5200
• Multiple vulnerabilities in Certain HPE ProLiant DL/ML Servers