Lucene search

K
cve[email protected]CVE-2022-37336
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2022-37336

2023-08-1103:15:13
CWE-20
web.nvd.nist.gov
8
cve-2022-37336
intel
nuc
bios firmware
input validation
privilege escalation
local access
nvd

7.9 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

9.0%

Improper input validation in BIOS firmware for some Intelยฎ NUC may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc_10_performance_kit_nuc10i7fnhn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnhnMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnkn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnknMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnhn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnhnMatch-
Node
intelnuc_10_performance_kit_nuc10i7fnkn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnknMatch-
Node
intelnuc_10_performance_kit_nuc10i3fnhn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i3fnhnMatch-
Node
intelnuc_10_performance_kit_nuc10i3fnkn_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i3fnknMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i5fnhja_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i5fnhjaMatch-
Node
intelnuc_10_performance_kit_nuc10i3fnhf_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i3fnhfMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i7fnkpa_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i7fnkpaMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i5fnhca_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i5fnhcaMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i3fnhfa_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i3fnhfaMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnhj_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnhjMatch-
Node
intelnuc_10_performance_kit_nuc10i7fnhc_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnhcMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i7fnhja_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i7fnhjaMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i3fnhja_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i3fnhjaMatch-
Node
intelnuc_10_performance_kit_nuc10i3fnk_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i3fnkMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i7fnhaa_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i7fnhaaMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnh_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnhMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnk_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnkMatch-
Node
intelnuc_10_performance_kit_nuc10i7fnh_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnhMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnhf_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnhfMatch-
Node
intelnuc_10_performance_mini_pc_nuc10i5fnkpa_firmwareMatch-
AND
intelnuc_10_performance_mini_pc_nuc10i5fnkpaMatch-
Node
intelnuc_10_performance_kit_nuc10i3fnh_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i3fnhMatch-
Node
intelnuc_10_performance_kit_nuc10i7fnk_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnkMatch-
Node
intelnuc_10_performance_kit_nuc10i7fnkp_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i7fnkpMatch-
Node
intelnuc_10_performance_kit_nuc10i5fnkp_firmwareMatch-
AND
intelnuc_10_performance_kit_nuc10i5fnkpMatch-

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

7.9 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2022-37336