Lucene search

[email protected]CVE-2022-37327

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2022-37327

2023-05-1014:15:13

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-37327

improper input validation

bios firmware

intel

nuc

information disclosure

local access

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper input validation in BIOS firmware for Intel® NUC, Intel® NUC Performance Kit, Intel® NUC Performance Mini PC, Intel® NUC 8 Compute Element, Intel® NUC Pro Kit, Intel® NUC Pro Board, Intel® NUC 11 Compute Element, Intel® NUC 12 Compute Element, Intel® NUC Extreme, Intel® NUC 12 Extreme Compute Element, Intel® NUC Laptop Kit, Intel® NUC Enthusiast, Intel® NUC Essential, Intel® NUC Laptop Kit, Intel® NUC Extreme Compute Element, Intel® NUC Boards, Intel® NUC Pro Compute Element, Intel® NUC Rugged may allow a privileged user to enable information disclosure via local access.

Affected configurations

NVD

Node

intelnuc10i3fnhMatch-

AND

intelnuc10i3fnh_firmwareRange<fncml357.0059

Node

intelnuc10i3fnhfMatch-

AND

intelnuc10i3fnhf_firmwareRange<fncml357.0059

Node

intelnuc10i3fnhfaMatch-

AND

intelnuc10i3fnhfa_firmwareRange<fncml357.0059

Node

intelnuc10i3fnhjaMatch-

AND

intelnuc10i3fnhja_firmwareRange<fncml357.0059

Node

intelnuc10i3fnhnMatch-

AND

intelnuc10i3fnhn_firmwareRange<fncml357.0059

Node

intelnuc10i3fnkMatch-

AND

intelnuc10i3fnk_firmwareRange<fncml357.0059

Node

intelnuc10i3fnknMatch-

AND

intelnuc10i3fnkn_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhMatch-

AND

intelnuc10i5fnh_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhcaMatch-

AND

intelnuc10i5fnhca_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhfMatch-

AND

intelnuc10i5fnhf_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhjaMatch-

AND

intelnuc10i5fnhja_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhjMatch-

AND

intelnuc10i5fnhj_firmwareRange<fncml357.0059

Node

intelnuc10i5fnhn_firmwareRange<fncml357.0059

AND

intelnuc10i5fnhnMatch-

Node

intelnuc10i5fnk_firmwareRange<fncml357.0059

AND

intelnuc10i5fnkMatch-

Node

intelnuc10i5fnkn_firmwareRange<fncml357.0059

AND

intelnuc10i5fnknMatch-

Node

intelnuc10i5fnkpa_firmwareRange<fncml357.0059

AND

intelnuc10i5fnkpaMatch-

Node

intelnuc10i5fnkp_firmwareRange<fncml357.0059

AND

intelnuc10i5fnkpMatch-

Node

intelnuc10i7fnh_firmwareRange<fncml357.0059

AND

intelnuc10i7fnhMatch-

Node

intelnuc10i7fnhaa_firmwareRange<fncml357.0059

AND

intelnuc10i7fnhaaMatch-

Node

intelnuc10i7fnhc_firmwareRange<fncml357.0059

AND

intelnuc10i7fnhcMatch-

Node

intelnuc10i7fnhja_firmwareRange<fncml357.0059

AND

intelnuc10i7fnhjaMatch-

Node

intelnuc10i7fnhn_firmwareRange<fncml357.0059

AND

intelnuc10i7fnhnMatch-

Node

intelnuc10i7fnk_firmwareRange<fncml357.0059

AND

intelnuc10i7fnkMatch-

Node

intelnuc10i7fnkn_firmwareRange<fncml357.0059

AND

intelnuc10i7fnknMatch-

Node

intelnuc10i7fnkp_firmwareRange<fncml357.0059

AND

intelnuc10i7fnkpMatch-

Node

intelnuc10i7fnkpa_firmwareRange<fncml357.0059

AND

intelnuc10i7fnkpaMatch-

Node

intelcm8i3cb4n_firmwareRange<cbwhl357.0101

AND

intelcm8i3cb4nMatch-

Node

intelcm8i5cb8n_firmwareRange<cbwhl357.0101

AND

intelcm8i5cb8nMatch-

Node

intelcm8i7cb8n_firmwareRange<cbwhl357.0101

AND

intelcm8i7cb8nMatch-

Node

intelcm8ccb4r_firmwareRange<cbwhl357.0101

AND

intelcm8ccb4rMatch-

Node

intelcm8pcb4r_firmwareRange<cbwhl357.0101

AND

intelcm8pcb4rMatch-

Node

intelnuc8i3pnb_firmwareRange<pnwhl357.0050

AND

intelnuc8i3pnbMatch-

Node

intelnuc8i3pnh_firmwareRange<pnwhl357.0050

AND

intelnuc8i3pnhMatch-

Node

intelnuc8i3pnk_firmwareRange<pnwhl357.0050

AND

intelnuc8i3pnkMatch-

Node

intelcm11ebi38w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi38wMatch-

Node

intelcm11ebi58w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi58wMatch-

Node

intelcm11ebi716w_firmwareRange<ebtgl357.0071

AND

intelcm11ebi716wMatch-

Node

intelcm11ebc4w_firmwareRange<ebtgl357.0071

AND

intelcm11ebc4wMatch-

Node

intelelm12hbi3_firmwareRange<hbadl357.0052

AND

intelelm12hbi3Match-

Node

intelelm12hbi5_firmwareRange<hbadl357.0052

AND

intelelm12hbi5Match-

Node

intelelm12hbi7_firmwareRange<hbadl357.0052

AND

intelelm12hbi7Match-

Node

intelelm12hbc_firmwareRange<hbadl357.0052

AND

intelelm12hbcMatch-

Node

intelnuc12dcmi7_firmwareRange<edadl579.0056

AND

intelnuc12dcmi7Match-

Node

intelnuc12edbi7_firmwareRange<edadl579.0056

AND

intelnuc12edbi7Match-

Node

intelnuc12dcmi9_firmwareRange<edadl579.0056

AND

intelnuc12dcmi9Match-

Node

intelnuc12edbi9_firmwareRange<edadl579.0056

AND

intelnuc12edbi9Match-

Node

intelnuc12wsbi3_firmwareRange<wsadl357.0086

AND

intelnuc12wsbi3Match-

Node

intelnuc12wsbi30z_firmwareRange<wsadl357.0086

AND

intelnuc12wsbi30zMatch-

Node

intelnuc12wshi3_firmwareRange<wsadl357.0086

AND

intelnuc12wshi3Match-

Node

intelnuc12wshi30l_firmwareRange<wsadl357.0086

AND

intelnuc12wshi30lMatch-

Node

intelnuc12wshi30z_firmwareRange<wsadl357.0086

AND

intelnuc12wshi30zMatch-

Node

intelnuc12wski3_firmwareRange<wsadl357.0086

AND

intelnuc12wski3Match-

Node

intelnuc12wski30z_firmwareRange<wsadl357.0086

AND

intelnuc12wski30zMatch-

Node

intelnuc12wsbi5_firmwareRange<wsadl357.0086

AND

intelnuc12wsbi5Match-

Node

intelnuc12wsbi50z_firmwareRange<wsadl357.0086

AND

intelnuc12wsbi50zMatch-

Node

intelnuc12wshi5_firmwareRange<wsadl357.0086

AND

intelnuc12wshi5Match-

Node

intelnuc12wshi50z_firmwareRange<wsadl357.0086

AND

intelnuc12wshi50zMatch-

Node

intelnuc12wski5_firmwareRange<wsadl357.0086

AND

intelnuc12wski5Match-

Node

intelnuc12wski50z_firmwareRange<wsadl357.0086

AND

intelnuc12wski50zMatch-

Node

intelnuc12wsbi70z_firmwareRange<wsadl357.0086

AND

intelnuc12wsbi70zMatch-

Node

intelnuc12wshi7_firmwareRange<wsadl357.0086

AND

intelnuc12wshi7Match-

Node

intelnuc12wshi70z_firmwareRange<wsadl357.0086

AND

intelnuc12wshi70zMatch-

Node

intelnuc12wski7_firmwareRange<wsadl357.0086

AND

intelnuc12wski7Match-

Node

intelnuc12wski70z_firmwareRange<wsadl357.0086

AND

intelnuc12wski70zMatch-

Node

intellapac71h_firmwareRange<acadl357.0059

AND

intellapac71hMatch-

Node

intellapac71g_firmwareRange<acadl357.0059

AND

intellapac71gMatch-

Node

intelnuc12snki72_firmwareRange<snadl357.0056

AND

intelnuc12snki72Match-

Node

intelnuc12snki72va_firmwareRange<snadl357.0056

AND

intelnuc12snki72vaMatch-

Node

intelnuc11atbc4_firmwareRange<atjslcpx.0038

AND

intelnuc11atbc4Match-

Node

intelnuc11atkc2_firmwareRange<atjslcpx.0038

AND

intelnuc11atkc2Match-

Node

intelnuc11atkc2_firmwareRange<atjslcpx.0038

AND

intelnuc11atkc2Match-

Node

intelnuc11atkc4_firmwareRange<atjslcpx.0038

AND

intelnuc11atkc4Match-

Node

intelnuc11atkpe_firmwareRange<atjslcpx.0038

AND

intelnuc11atkpeMatch-

Node

intellapbc510_firmwareRange<bctgl357.0078

AND

intellapbc510Match-

Node

intellapbc710_firmwareRange<bctgl357.0078

AND

intellapbc710Match-

Node

intellapkc51e_firmwareRange<kctgl357.0044

AND

intellapkc51eMatch-

Node

intellapkc71e_firmwareRange<kctgl357.0044

AND

intellapkc71eMatch-

Node

intellapkc71f_firmwareRange<kctgl357.0044

AND

intellapkc71fMatch-

Node

intelnuc11btmi7_firmwareRange<dbtgl579.0065

AND

intelnuc11btmi7Match-

Node

intelnuc11dbbi7_firmwareRange<dbtgl579.0065

AND

intelnuc11dbbi7Match-

Node

intelnuc11btmi9_firmwareRange<dbtgl579.0065

AND

intelnuc11btmi9Match-

Node

intelnuc11dbbi9_firmwareRange<dbtgl579.0065

AND

intelnuc11dbbi9Match-

Node

intelnuc11tnbi3_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi3Match-

Node

intelnuc11tnbi30z_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi30zMatch-

Node

intelnuc11tnhi3_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi3Match-

Node

intelnuc11tnhi30l_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi30lMatch-

Node

intelnuc11tnhi30p_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi30pMatch-

Node

intelnuc11tnhi30z_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi30zMatch-

Node

intelnuc11tnki3_firmwareRange<tntgl357.0070

AND

intelnuc11tnki3Match-

Node

intelnuc11tnki30z_firmwareRange<tntgl357.0070

AND

intelnuc11tnki30zMatch-

Node

intelnuc11tnbi5_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi5Match-

Node

intelnuc11tnbi50z_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi50zMatch-

Node

intelnuc11tnhi5_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi5Match-

Node

intelnuc11tnhi50l_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi50lMatch-

Node

intelnuc11tnhi50w_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi50wMatch-

Node

intelnuc11tnhi50z_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi50zMatch-

Node

intelnuc11tnki5_firmwareRange<tntgl357.0070

AND

intelnuc11tnki5Match-

Node

intelnuc11tnki50z_firmwareRange<tntgl357.0070

AND

intelnuc11tnki50zMatch-

Node

intelnuc11tnbi7_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi7Match-

Node

intelnuc11tnbi70z_firmwareRange<tntgl357.0070

AND

intelnuc11tnbi70zMatch-

Node

intelnuc11tnhi7_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi7Match-

Node

intelnuc11tnhi70l_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi70lMatch-

Node

intelnuc11tnhi70q_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi70qMatch-

Node

intelnuc11tnhi70z_firmwareRange<tntgl357.0070

AND

intelnuc11tnhi70zMatch-

Node

intelnuc11tnki7_firmwareRange<tntgl357.0070

AND

intelnuc11tnki7Match-

Node

intelnuc11tnki70z_firmwareRange<tntgl357.0070

AND

intelnuc11tnki70zMatch-

Node

intelnuc11phki7c_firmwareRange<phtgl579.0071

AND

intelnuc11phki7cMatch-

Node

intelnuc11phki7caa_firmwareRange<phtgl579.0071

AND

intelnuc11phki7caaMatch-

Node

intelnuc9v7qnb_firmwareRange<qncflx70.0071

AND

intelnuc9v7qnbMatch-

Node

intelnuc9v7qnx_firmwareRange<qncflx70.0071

AND

intelnuc9v7qnxMatch-

Node

intelnuc9vxqnb_firmwareRange<qncflx70.0071

AND

intelnuc9vxqnbMatch-

Node

intelnuc9vxqnx_firmwareRange<qncflx70.0071

AND

intelnuc9vxqnxMatch-

Node

intelnuc8cchb_firmwareRange<chaplcel.0061

AND

intelnuc8cchbMatch-

Node

intelnuc8cchbn_firmwareRange<chaplcel.0061

AND

intelnuc8cchbnMatch-

Node

intelnuc8cchkrnMatch-

AND

intelnuc8cchkrn_firmwareMatch-

Node

intelnuc8cchkrMatch-

AND

intelnuc8cchkr_firmwareRange<chaplcel.0061

Node

intellaprc510Match-

AND

intellaprc510_firmwareRange<rcadl357.0060

Node

intellaprc710Match-

AND

intellaprc710_firmwareRange<rcadl357.0060

CPENameOperatorVersion
intel:nuc10i3fnh_firmwareintel nuc10i3fnh firmwareltfncml357.0059

CPE	Name	Operator	Version
intel:nuc10i3fnh_firmware	intel nuc10i3fnh firmware	lt	fncml357.0059

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-37327

nvd1 cvelist1 prion1 intel1