CVEvulnerability

CVE-2022-36339

7.8 HIGH Published 2023-05-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Affected configurations

• intel cm8i3cb4n firmware (< cbwhl357.0101) • intel cm8i5cb8n firmware (< cbwhl357.0101) • intel cm8i7cb8n firmware (< cbwhl357.0101) • intel cm8ccb4r firmware (< cbwhl357.0101) • intel cm8pcb4r firmware (< cbwhl357.0101) • intel cm11ebi38w firmware (< ebtgl357.0071) • intel cm11ebi58w firmware (< ebtgl357.0071) • intel cm11ebi716w firmware (< ebtgl357.0071) • intel cm11ebc4w firmware (< ebtgl357.0071) • intel elm12hbi3 firmware (< hbadl357.0052) • intel elm12hbi5 firmware (< hbadl357.0052) • intel elm12hbi7 firmware (< hbadl357.0052) • intel elm12hbc firmware (< hbadl357.0052)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References