Lucene search

K
cve[email protected]CVE-2022-26024
HistoryNov 11, 2022 - 4:15 p.m.

CVE-2022-26024

2022-11-1116:15:12
web.nvd.nist.gov
30
5
intel
nuc
hdmi
firmware update
cve-2022-26024
access control
privilege escalation
security vulnerability
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

Improper access control in the Intelยฎ NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc7i3dnbe_firmwareRange<1.78.2.0.7
AND
intelnuc7i3dnbeMatch-
Node
intelnuc7i3dnhe_firmwareRange<1.78.2.0.7
AND
intelnuc7i3dnheMatch-
Node
intelnuc7i3dnhnc_firmwareRange<1.78.2.0.7
AND
intelnuc7i3dnhncMatch-
Node
intelnuc7i3dnke_firmwareRange<1.78.2.0.7
AND
intelnuc7i3dnkeMatch-
Node
intelnuc7i3dnktc_firmwareRange<1.78.2.0.7
AND
intelnuc7i3dnktcMatch-
Node
intelnuc7i5dnbe_firmwareRange<1.78.2.0.7
AND
intelnuc7i5dnbeMatch-
Node
intelnuc7i5dnhe_firmwareRange<1.78.2.0.7
AND
intelnuc7i5dnheMatch-
Node
intelnuc7i5dnke_firmwareRange<1.78.2.0.7
AND
intelnuc7i5dnkeMatch-
Node
intelnuc7i7dnbe_firmwareRange<1.78.2.0.7
AND
intelnuc7i7dnbeMatch-
Node
intelnuc7i7dnhe_firmwareRange<1.78.2.0.7
AND
intelnuc7i7dnheMatch-
Node
intelnuc7i7dnke_firmwareRange<1.78.2.0.7
AND
intelnuc7i7dnkeMatch-

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN",
    "versions": [
      {
        "version": "before version 1.78.2.0.7",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Social References

More

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

Related for CVE-2022-26024