Lucene search
HistoryNov 11, 2022 - 4:15 p.m.
CVE-2022-35276
intel nuc 8
bios firmware
access control
privilege escalation
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Improper access control in BIOS firmware for some Intel® NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelnuc_8_compute_element_cm8i7cb_firmwareRange<cbwhl357.0096
intelnuc_8_compute_element_cm8i7cbMatch-
Node
intelnuc_8_compute_element_cm8i3cb_firmwareRange<cbwhl357.0096
intelnuc_8_compute_element_cm8i3cbMatch-
Node
intelnuc_8_compute_element_cm8ccb_firmwareRange<cbwhl357.0096
intelnuc_8_compute_element_cm8ccbMatch-
Node
intelnuc_8_compute_element_cm8i5cb_firmwareRange<cbwhl357.0096
intelnuc_8_compute_element_cm8i5cbMatch-
Node
intelnuc_8_compute_element_cm8pcb_firmwareRange<cbwhl357.0096
intelnuc_8_compute_element_cm8pcbMatch-
Related
cnvd
cnvd
Intel NUC 8 Compute Elements Access Control Error Vulnerability
2022-11-16 00:00:00
cvelist
cvelist
CVE-2022-35276
2022-11-11 15:48:52
cve
cve
CVE-2022-35276
2022-11-11 16:15:15
prion
prion
Improper access control
2022-11-11 16:15:00
intel
intel
Intel® NUC Firmware Advisory
2023-02-16 00:00:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2022-35276