Input validation

Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...

CVE-2022-38101

Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38101

Intel Intel® NUC Chaco Canyon BIOS update software contains an Uncontrolled search path vulnerability (CVE-2022-38101) that could let an authenticated local user escalate privileges. The issue affects BIOS update software prior to iFlashV Windows 5.13.00.2105 on affected systems (e.g., NUC8CCHKR,...

CVE-2022-38101

Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38087

CVE-2022-38087 is described in Intel’s advisory as a BIOS firmware issue for some Intel processors that may allow a privileged local user to cause information disclosure. The Intel SA-00807 entry explicitly documents CVE-2022-38087 with a CVSS v3.1 base score of 4.1 (AV:L/AC:H/PR:H/UI:N/S:U/C:H/I...

CVE-2022-38087

Exposure of resource to wrong sphere in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-38087

Exposure of resource to wrong sphere in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-33894

CVE-2022-33894 concerns improper input validation in BIOS firmware for certain Intel processors, enabling privilege escalation with local access. Multiple sources (Intel advisory INTEL-SA-00807 and related Red Hat/NVD/NVD references) describe the issue as a BIOS/firmware vulnerability affecting v...

CVE-2022-33894

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-31477

Improper initialization for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-32577

Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...

CVE-2022-32577

Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...

CVE-2022-31477

CVE-2022-31477 affects Intel® NUC BIOS firmware: improper initialization may allow a privileged local user to disclose information. Red Hat and NVD entries mirror this Intel NUC BIOS firmware issue; Intel advisory INTEL-SA-00777 lists CVE-2022-31477 among several related fixes. The Red Hat and NV...

CVE-2022-32577

CVE-2022-32577 affects Intel NUC BIOS firmware prior to PY0081. The issue is improper input validation in BIOS firmware that may allow a privileged local attacker to cause information disclosure or denial of service. The impact is noted as Confidentiality High and Availability High on affected co...

CVE-2023-25771

CVE-2023-25771 concerns Intel® NUC BIOS firmware where an improper access control could allow a privileged local user to cause a denial of service. Affected component: Intel NUC BIOS/firmware. Root cause: access control weaknesses in BIOS firmware. Impact: local denial of service with availabilit...

CVE-2023-25771

Improper access control for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-25771

Improper access control for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-37327

CVE-2022-37327 describes improper input validation in Intel NUC BIOS firmware (across multiple NUC elements and kits) that may allow a privileged local user to cause information disclosure. Connected sources confirm affected products include various Intel NUC firmware components (e.g., NUC 8/11/1...

CVE-2022-32766

Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-37327

Improper input validation in BIOS firmware for IntelR NUC, IntelR NUC Performance Kit, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element, IntelR NUC Extreme, IntelR NUC 12 Extreme...