{"id":"CVE-2022-27497","state":"PUBLISHED","title":"Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentiall","description":"Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.","publishedAt":"2022-11-11T15:48:35.754Z","updatedAt":"2025-02-05T20:54:25.497Z","severity":{"score":8.6,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) AMT"],"affected":[{"vendor":"n/a","product":"Intel(R) AMT","defaultStatus":"unaffected","versions":[{"version":"before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T19:49:52.117Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/27xxx/CVE-2022-27497.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-27497","state":"PUBLISHED","datePublished":"2022-11-11T15:48:35.754Z","dateUpdated":"2025-02-05T20:54:25.497Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","requesterUserId":"e1538295-92a9-4bd5-bb63-88a76fc3a35c","dateReserved":"2022-04-20T00:10:11.670Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access."}],"affected":[{"vendor":"n/a","product":"Intel(R) AMT","defaultStatus":"unaffected","versions":[{"version":"before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":8.6,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2022-11-14T17:45:57.796Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:32:57.943Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-29T20:40:55.451083Z","id":"CVE-2022-27497","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-05T20:54:25.497Z"}}]}}}