Lucene search

K
nvd[email protected]NVD:CVE-2022-27229
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2022-27229

2023-11-1419:15:10
CWE-249
CWE-22
web.nvd.nist.gov
cve-2022-27229
intel nuc kits
path transversal
firmware update
escalation of privilege
local access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Path transversal in some Intelยฎ NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelnuc_7_business_nuc7i3dnhncMatch-
OR
intelnuc_7_business_nuc7i3dnktcMatch-
OR
intelnuc_7_business_nuc7i5dnkpcMatch-
OR
intelnuc_7_business_nuc7i5dnkpuMatch-
OR
intelnuc_kit_nuc7i3dnheMatch-
OR
intelnuc_kit_nuc7i3dnkeMatch-
OR
intelnuc_kit_nuc7i5dnheMatch-
OR
intelnuc_kit_nuc7i5dnkeMatch-
OR
intelnuc_kit_nuc7i7dnheMatch-
OR
intelnuc_kit_nuc7i7dnkeMatch-
AND
intelhdmi_firmwareRange<1.79.1.1

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Related for NVD:CVE-2022-27229