CVE-2022-36349: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36789: Improper Access Control

Improper access control in BIOS firmware for some IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-32569: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in BIOS firmware for some IntelR NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-37334: Improper Initialization

Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards TNTGL357.0064, which stems from improper initialization of their BIOS firmware allowing authenticated users to potentially...

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server

A phishing-as-a-service PhaaS platform known as Robin Banks has relocated its attack infrastructure to DDoS-Guard, a Russian provider of bulletproof hosting services. The switch comes after "Cloudflare disassociated Robin Banks phishing infrastructure from its services, causing a multi-day...

Security Bulletin: Potential security vulnerabilities with JavaTM SDKs

Abstract Smarter Infrastructure Products - Potential security exposure when using JavaTM based applications due to vulnerabilities in Java Software Developer Kits. See Vulnerability Details for CVE IDs. Content VULNERABILITY DETAILS: Customers who have Java based applications, such as Maximo Asse...

Purple Fox Rootkit Now Propagates as a Worm

Purple Fox is an active malware campaign targeting Windows machines. Up until recently, Purple Fox’s operators infected machines by using exploit kits and phishing emails...

Cyber Signals: 3 strategies for protection against ransomware

The “as a service” business model has gained widespread popularity as growing cloud adoption has made it possible for people to access important services through third-party providers. Given the convenience and agility of service offerings, perhaps it shouldn’t be surprising that the “as a servic...

CVE-2022-33209

Improper input validation in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-28858

Improper buffer restriction in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-34488

Improper buffer restrictions in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-34345

Improper input validation in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-34488

Improper buffer restrictions in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-28858

CVE-2022-28858 affects Intel NUC Laptop Kits with firmware prior to BC0076, where an improper buffer restriction could allow a privileged user to escalate privileges via local access. The Intel advisory INTEL-SA-00712 confirms the issue and provides mitigations through firmware BIOS updates to af...

PT-2022-21745 · Intel · Intel Nuc Laptop Kits

Name of the Vulnerable Software and Affected Versions: IntelR NUC Laptop Kits versions prior to BC0076 Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations:...

CVE-2022-28858: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restriction in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33209: Improper Input Validation

Improper input validation in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-19264

Name of the Vulnerable Software and Affected Versions IntelR NUC Laptop Kits versions prior to BC0076 Description The issue is related to improper buffer restriction in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations...