PT-2023-12990 · Intel · Intel Manageability Commander

Yossef Kuszer · Published 2023-08-10 · Updated 2023-08-16 · CVE-2022-29887

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Manageability Commander versions prior to 2.3

Description The issue is related to Cross-site Scripting (XSS) that may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Recommendations For versions prior to 2.3, update to version 2.3 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-29887

Affected Products

Intel Manageability Commander

References · 10

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00893.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29887 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29887 · Security Note
• https://twitter.com/CVEnew/status/1690264490401550337 · Twitter Post
• https://t.me/cvenotify/56244 · Telegram Post
• https://twitter.com/cracbot/status/1690241774294589440 · Twitter Post
• https://twitter.com/mark_a_figueroa/status/1689876904503873536 · Twitter Post
• https://t.me/cibsecurity/68300 · Telegram Post
• https://t.me/cvenotify/56670 · Telegram Post
• https://twitter.com/geekphane/status/1689874312143003649 · Twitter Post