CVE-2022-31477

Published: May 10, 2023Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Affected (35)

Products: Intel: Nuc11pahi3 Firmware, Nuc11pahi30z Firmware, Nuc11paki3 Firmware, Nuc11pahi5 Firmware, Nuc11pahi50z Firmware, Nuc11paki5 Firmware, Nuc11paqi50wa Firmware, Nuc11pahi7 Firmware, Nuc11pahi70z Firmware, Nuc11paki7 Firmware, Nuc11paqi70qa Firmware, Cm11ebi38w Firmware, Cm11ebi58w Firmware, Cm11ebi716w Firmware, Cm11ebc4w Firmware, Lapbc510 Firmware, Lapbc710 Firmware, Lapkc51e Firmware, Lapkc71e Firmware, Lapkc71f Firmware, Nuc11btmi7 Firmware, Nuc11dbbi7 Firmware, Nuc11btmi9 Firmware, Nuc11dbbi9 Firmware, Nuc11phki7c Firmware, Nuc11phki7caa Firmware, Nuc11tnkv50z Firmware, Nuc11tnhv70l Firmware, Nuc11tnhv50l Firmware, Nuc11tnhv5 Firmware, Nuc11tnhv7 Firmware, Nuc11tnbv7 Firmware, Nuc11tnbv5 Firmware, Nuc11tnkv5 Firmware, Nuc11tnkv7 Firmware

Intel

35 products

Nuc11pahi3 Firmware

Nuc11pahi30z Firmware

Nuc11paki3 Firmware

Nuc11pahi5 Firmware

Nuc11pahi50z Firmware

Nuc11paki5 Firmware

Nuc11paqi50wa Firmware

Nuc11pahi7 Firmware

Nuc11pahi70z Firmware

Nuc11paki7 Firmware

Nuc11paqi70qa Firmware

Nuc11phki7caa Firmware

Nuc11tnkv50z Firmware

Nuc11tnhv70l Firmware

Nuc11tnhv50l Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi3 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi30z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi30z	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11paki3 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11paki3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi5	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi50z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi50z	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11paki5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11paki5	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11paqi50wa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11paqi50wa	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi7	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11pahi70z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11pahi70z	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11paki7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11paki7	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11paqi70qa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11paqi70qa	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm11ebi38w Firmware	All versions

Running on/with	Platform Versions
Intel Cm11ebi38w	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm11ebi58w Firmware	All versions

Running on/with	Platform Versions
Intel Cm11ebi58w	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm11ebi716w Firmware	All versions

Running on/with	Platform Versions
Intel Cm11ebi716w	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm11ebc4w Firmware	All versions

Running on/with	Platform Versions
Intel Cm11ebc4w	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapbc510 Firmware	All versions

Running on/with	Platform Versions
Intel Lapbc510	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapbc710 Firmware	All versions

Running on/with	Platform Versions
Intel Lapbc710	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapkc51e Firmware	All versions

Running on/with	Platform Versions
Intel Lapkc51e	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapkc71e Firmware	All versions

Running on/with	Platform Versions
Intel Lapkc71e	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapkc71f Firmware	All versions

Running on/with	Platform Versions
Intel Lapkc71f	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11btmi7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11btmi7	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11dbbi7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11dbbi7	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11btmi9 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11btmi9	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11dbbi9 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11dbbi9	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11phki7c Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11phki7c	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11phki7caa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11phki7caa	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnkv50z Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnkv50z	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnhv70l Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnhv70l	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnhv50l Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnhv50l	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnhv5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnhv5	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnhv7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnhv7	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnbv7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnbv7	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnbv5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnbv5	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnkv5 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnkv5	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc11tnkv7 Firmware	All versions

Running on/with	Platform Versions
Intel Nuc11tnkv7	All versions

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.