CVE-2022-33176

Published: Nov 11, 2022Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (11)

Intel

11 products

Nuc 11 Performance Kit Nuc11pahi30z Firmware

Nuc 11 Performance Kit Nuc11pahi50z Firmware

Nuc 11 Performance Kit Nuc11pahi70z Firmware

Nuc 11 Performance Kit Nuc11pahi3 Firmware

Nuc 11 Performance Kit Nuc11pahi5 Firmware

Nuc 11 Performance Kit Nuc11pahi7 Firmware

Nuc 11 Performance Kit Nuc11paki3 Firmware

Nuc 11 Performance Kit Nuc11paki5 Firmware

Nuc 11 Performance Kit Nuc11paki7 Firmware

Nuc 11 Performance Mini Pc Nuc11paqi50wa Firmware

Nuc 11 Performance Mini Pc Nuc11paqi70qa Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi30z Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi30z	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi50z Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi50z	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi70z Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi70z	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi3 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi5 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11pahi7 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11pahi7	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki3 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki3	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki5 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki5	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Kit Nuc11paki7 Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Kit Nuc11paki7	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi50wa Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi50wa	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi70qa Firmware	Before patgl357.0042

Running on/with	Platform Versions
Intel Nuc 11 Performance Mini Pc Nuc11paqi70qa	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.