CVEvulnerability
CVE-2022-27229
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-22, CWE-249
Description
Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel hdmi firmware (< 1.79.1.1)
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html Patch, Vendor Advisory