Lucene search

[email protected]CVE-2022-38099

HistoryNov 11, 2022 - 4:15 p.m.

CVE-2022-38099

2022-11-1116:15:16

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-38099

intel

bios firmware

input validation

nuc 11

escalation of privilege

local access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper input validation in BIOS firmware for some Intel® NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelnuc_11_compute_element_cm11ebi38w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebi38wMatch-

Node

intelnuc_11_compute_element_cm11ebc4w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebc4wMatch-

Node

intelnuc_11_compute_element_cm11ebi58w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebi58wMatch-

Node

intelnuc_11_compute_element_cm11ebv58w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebv58wMatch-

Node

intelnuc_11_compute_element_cm11ebi716w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebi716wMatch-

Node

intelnuc_11_compute_element_cm11ebv716w_firmwareRange<ebtgl357.0065

AND

intelnuc_11_compute_element_cm11ebv716wMatch-

Node

intelnuc11dbbi9_firmwareRange<ebtgl357.0065

AND

intelnuc11dbbi9Match-

Node

intelnuc11dbbi7_firmwareRange<ebtgl357.0065

AND

intelnuc11dbbi7Match-

CPENameOperatorVersion
intel:nuc_11_compute_element_cm11ebi38w_firmwareintel nuc 11 compute element cm11ebi38w firmwareltebtgl357.0065

CPE	Name	Operator	Version
intel:nuc_11_compute_element_cm11ebi38w_firmware	intel nuc 11 compute element cm11ebi38w firmware	lt	ebtgl357.0065

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC 11 Compute Elements",
    "versions": [
      {
        "version": "before version EBTGL357.0065",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-38099

prion1 cvelist1 nvd1 intel1