Lucene search
HistoryNov 11, 2022 - 4:15 p.m.
CVE-2022-21794
bios firmware
intel nuc boards
privilege escalation
local access
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Improper authentication in BIOS firmware for some Intel® NUC Boards, Intel® NUC Business, Intel® NUC Enthusiast, Intel® NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelnuc_kit_nuc8i7hnk_firmwareRange<hn0067
intelnuc_kit_nuc8i7hnkMatch-
Node
intelnuc_kit_nuc8i7hvk_firmwareRange<hn0067
intelnuc_kit_nuc8i7hvkMatch-
Node
intelnuc_8_enthusiast_nuc8i7hvkva_firmwareRange<hn0067
intelnuc_8_enthusiast_nuc8i7hvkvaMatch-
Node
intelnuc_8_enthusiast_nuc8i7hvkvaw_firmwareRange<hn0067
intelnuc_8_enthusiast_nuc8i7hvkvawMatch-
Node
intelnuc_8_business_nuc8i7hnkqc_firmwareRange<hn0067
intelnuc_8_business_nuc8i7hnkqcMatch-
Related
cvelist
cvelist
CVE-2022-21794
2022-11-11 15:48:50
prion
prion
Authentication flaw
2022-11-11 16:15:00
cve
cve
CVE-2022-21794
2022-11-11 16:15:11
intel
intel
Intel® NUC Firmware Advisory
2023-02-16 00:00:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2022-21794