Lucene search

IntelCVELIST:CVE-2022-31477

HistoryMay 10, 2023 - 1:16 p.m.

CVE-2022-31477

2023-05-1013:16:49

CWE-665

intel

www.cve.org

cve-2022-31477

intel nuc

firmware

initialization

information disclosure

local access

privileged user

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper initialization for some Intel® NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC BIOS firmware",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2022-31477