CVE-2022-29887: 
Intel Manageability Commander vulnerability analysis and mitigation

Cross-site Scripting (XSS) vulnerability (CVE-2022-29887) was identified in Intel(R) Manageability Commander software versions prior to 2.3. This vulnerability affects unauthenticated users and was disclosed in May 2022 (Intel Advisory).

The vulnerability is classified as a Cross-site Scripting (XSS) issue (CWE-79: Improper Neutralization of Input During Web Page Generation). It has received a CVSS v3.1 base score of 9.6 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) from NIST NVD, while Intel Corporation assessed it with a score of 8.1 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) (NVD).

The vulnerability could allow an unauthenticated user to potentially enable escalation of privilege via network access. The high severity ratings indicate significant potential impact on the confidentiality and integrity of the affected systems (Intel Advisory).

The vulnerability requires network access and user interaction for successful exploitation. The attack vector is network-based (AV:N) with low attack complexity (AC:L) and requires no privileges (PR:N) (NVD).

Intel has released version 2.3 of the Manageability Commander software to address this vulnerability. Users are advised to update to this version or later to mitigate the security risk (Intel Advisory).