CVE-2022-34152

2022-11-1116:15:15

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-34152

intel

nuc

bios

firmware

input validation

privilege escalation

security vulnerability

7.7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper input validation in BIOS firmware for some Intel® NUC Boards, Intel® NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelnuc_board_de3815tybe_firmwareRange<ty0070

AND

intelnuc_board_de3815tybeMatch-

Node

intelnuc_kit_de3815tykhe_firmwareRange<ty0070

AND

intelnuc_kit_de3815tykheMatch-

CPENameOperatorVersion
intel:nuc_board_de3815tybe_firmwareintel nuc board de3815tybe firmwareltty0070

CPE	Name	Operator	Version
intel:nuc_board_de3815tybe_firmware	intel nuc board de3815tybe firmware	lt	ty0070

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Boards, Intel(R) NUC Kits",
    "versions": [
      {
        "version": "before version TY0070",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]