Lucene search

[email protected]CVE-2022-21794

HistoryNov 11, 2022 - 4:15 p.m.

CVE-2022-21794

2022-11-1116:15:11

CWE-287

[email protected]

web.nvd.nist.gov

cve-2022-21794

bios firmware

intel nuc boards

authentication

privilege escalation

nvd

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper authentication in BIOS firmware for some Intel® NUC Boards, Intel® NUC Business, Intel® NUC Enthusiast, Intel® NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelnuc_kit_nuc8i7hnk_firmwareRange<hn0067

AND

intelnuc_kit_nuc8i7hnkMatch-

Node

intelnuc_kit_nuc8i7hvk_firmwareRange<hn0067

AND

intelnuc_kit_nuc8i7hvkMatch-

Node

intelnuc_8_enthusiast_nuc8i7hvkva_firmwareRange<hn0067

AND

intelnuc_8_enthusiast_nuc8i7hvkvaMatch-

Node

intelnuc_8_enthusiast_nuc8i7hvkvaw_firmwareRange<hn0067

AND

intelnuc_8_enthusiast_nuc8i7hvkvawMatch-

Node

intelnuc_8_business_nuc8i7hnkqc_firmwareRange<hn0067

AND

intelnuc_8_business_nuc8i7hnkqcMatch-

CPENameOperatorVersion
intel:nuc_kit_nuc8i7hnk_firmwareintel nuc kit nuc8i7hnk firmwarelthn0067

CPE	Name	Operator	Version
intel:nuc_kit_nuc8i7hnk_firmware	intel nuc kit nuc8i7hnk firmware	lt	hn0067

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits",
    "versions": [
      {
        "version": "before version HN0067",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]