Lucene search
HistoryNov 11, 2022 - 4:15 p.m.
CVE-2022-37345
bios firmware
authentication
vulnerability
intel nuc kits
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Improper authentication in BIOS firmware[A1] for some Intel® NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelnuc_kit_nuc5i3ryh_firmwareRange<ry0386
intelnuc_kit_nuc5i3ryhMatch-
Node
intelnuc_kit_nuc5i7ryh_firmwareRange<ry0386
intelnuc_kit_nuc5i7ryhMatch-
Node
intelnuc_kit_nuc5i5ryk_firmwareRange<ry0386
intelnuc_kit_nuc5i5rykMatch-
Node
intelnuc_kit_nuc5i5ryh_firmwareRange<ry0386
intelnuc_kit_nuc5i5ryhMatch-
Node
intelnuc_kit_nuc5i3ryk_firmwareRange<ry0386
intelnuc_kit_nuc5i3rykMatch-
Node
intelnuc_kit_nuc5i5ryhs_firmwareRange<ry0386
intelnuc_kit_nuc5i5ryhsMatch-
Node
intelnuc_kit_nuc5i3ryhs_firmwareRange<ry0386
intelnuc_kit_nuc5i3ryhsMatch-
Node
intelnuc_kit_nuc5i3ryhsn_firmwareRange<ry0386
intelnuc_kit_nuc5i3ryhsnMatch-
Related
prion
prion
Authentication flaw
2022-11-11 16:15:00
cve
cve
CVE-2022-37345
2022-11-11 16:15:16
cvelist
cvelist
CVE-2022-37345
2022-11-11 15:48:50
intel
intel
Intel® NUC Firmware Advisory
2023-02-16 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2022-37345