Lucene search
IntelCVELIST:CVE-2022-27229HistoryNov 14, 2023 - 7:04 p.m.
CVE-2022-27229
2023-11-1419:04:44
CWE-249
intel
www.cve.org
cve-2022-27229
path transversal
intel nuc kits
firmware update tool
escalation of privilege
local access
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
10.6%
Path transversal in some Intel® NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software",
"versions": [
{
"version": "before version 1.79.1.1",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2022-27229
2023-11-14 19:15:10
prion
prion
Path traversal
2023-11-14 19:15:00
nvd
nvd
CVE-2022-27229
2023-11-14 19:15:10
intel
intel
Intel® NUC Software Advisory
2023-11-14 00:00:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
10.6%
Related for CVELIST:CVE-2022-27229