CVEvulnerability

CVE-2022-37336

6.7 MEDIUM Published 2023-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

• intel nuc 10 performance kit nuc10i7fnhn firmware • intel nuc 10 performance kit nuc10i5fnkn firmware • intel nuc 10 performance kit nuc10i5fnhn firmware • intel nuc 10 performance kit nuc10i7fnkn firmware • intel nuc 10 performance kit nuc10i3fnhn firmware • intel nuc 10 performance kit nuc10i3fnkn firmware • intel nuc 10 performance mini pc nuc10i5fnhja firmware • intel nuc 10 performance kit nuc10i3fnhf firmware • intel nuc 10 performance mini pc nuc10i7fnkpa firmware • intel nuc 10 performance mini pc nuc10i5fnhca firmware • intel nuc 10 performance mini pc nuc10i3fnhfa firmware • intel nuc 10 performance kit nuc10i5fnhj firmware • intel nuc 10 performance kit nuc10i7fnhc firmware • intel nuc 10 performance mini pc nuc10i7fnhja firmware • intel nuc 10 performance mini pc nuc10i3fnhja firmware • intel nuc 10 performance kit nuc10i3fnk firmware • intel nuc 10 performance mini pc nuc10i7fnhaa firmware • intel nuc 10 performance kit nuc10i5fnh firmware • intel nuc 10 performance kit nuc10i5fnk firmware • intel nuc 10 performance kit nuc10i7fnh firmware • intel nuc 10 performance kit nuc10i5fnhf firmware • intel nuc 10 performance mini pc nuc10i5fnkpa firmware • intel nuc 10 performance kit nuc10i3fnh firmware • intel nuc 10 performance kit nuc10i7fnk firmware • intel nuc 10 performance kit nuc10i7fnkp firmware • intel nuc 10 performance kit nuc10i5fnkp firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References