Lucene search

[email protected]CVE-2022-36339

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2022-36339

2023-05-1014:15:13

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-36339

intel

nuc

firmware

input validation

privilege escalation

local access

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper input validation in firmware for Intel® NUC 8 Compute Element, Intel® NUC 11 Compute Element, Intel® NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelcm8i3cb4n_firmwareRange<cbwhl357.0101

AND

intelcm8i3cb4nMatch-

Node

intelcm8i5cb8n_firmwareRange<cbwhl357.0101

AND

intelcm8i5cb8nMatch-

Node

intelcm8i7cb8n_firmwareRange<cbwhl357.0101

AND

intelcm8i7cb8nMatch-

Node

intelcm8ccb4r_firmwareRange<cbwhl357.0101

AND

intelcm8ccb4rMatch-

Node

intelcm8pcb4r_firmwareRange<cbwhl357.0101

AND

intelcm8pcb4rMatch-

Node

intelcm11ebi38w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi38wMatch-

Node

intelcm11ebi58w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi58wMatch-

Node

intelcm11ebi716w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi716wMatch-

Node

intelcm11ebc4w_firmwareRange<ebtgl357.0071

AND

intelcm11ebc4wMatch-

Node

intelelm12hbi3Match-

AND

intelelm12hbi3_firmwareRange<hbadl357.0052

Node

intelelm12hbi5Match-

AND

intelelm12hbi5_firmwareRange<hbadl357.0052

Node

intelelm12hbi7Match-

AND

intelelm12hbi7_firmwareRange<hbadl357.0052

Node

intelelm12hbcMatch-

AND

intelelm12hbc_firmwareRange<hbadl357.0052

CPENameOperatorVersion
intel:cm8i3cb4n_firmwareintel cm8i3cb4n firmwareltcbwhl357.0101

CPE	Name	Operator	Version
intel:cm8i3cb4n_firmware	intel cm8i3cb4n firmware	lt	cbwhl357.0101

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-36339

nvd1 prion1 cvelist1 intel1