Lucene search

K
cvelistIntelCVELIST:CVE-2022-26124
HistoryNov 11, 2022 - 3:48 p.m.

CVE-2022-26124

2022-11-1115:48:53
intel
www.cve.org
cve-2022-26124
bios firmware
intel nuc boards
privilege escalation
local access

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

Improper buffer restrictions in BIOS firmware for some Intelยฎ NUC Boards, Intelยฎ NUC 8 Boards, Intelยฎ NUC 8 Rugged Boards and Intelยฎ NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits",
    "versions": [
      {
        "version": "before version CHAPLCEL.0059",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

Related for CVELIST:CVE-2022-26124