CVE-2022-34147

Published: May 10, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (41)

41 products

Nuc10i3fnhfa Firmware

Nuc10i3fnhja Firmware

Nuc10i5fnhca Firmware

Nuc10i5fnhf Firmware

Nuc10i5fnhja Firmware

Nuc10i5fnkpa Firmware

Nuc10i5fnkp Firmware

Nuc10i7fnh Firmware

Nuc10i7fnhaa Firmware

Nuc10i7fnhc Firmware

Nuc10i7fnhja Firmware

Nuc10i7fnkpa Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapqc71a Firmware	Before qccfl357.0158

Running on/with	Platform Versions
Intel Lapqc71a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapqc71b Firmware	Before qccfl357.0158

Running on/with	Platform Versions
Intel Lapqc71b	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapqc71c Firmware	Before qccfl357.0158

Running on/with	Platform Versions
Intel Lapqc71c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Lapqc71d Firmware	Before qccfl357.0158

Running on/with	Platform Versions
Intel Lapqc71d	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnh Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnh	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnhf Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnhf	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnhfa Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnhfa	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnhja Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnhja	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnhn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnhn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnk Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnk	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i3fnkn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i3fnkn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnh Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnhca Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnhca	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnhf Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnhf	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnhja Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnhja	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnhj Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnhj	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnhn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnhn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnk Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnk	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnkn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnkn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnkpa Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnkpa	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i5fnkp Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i5fnkp	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnh Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnh	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnhaa Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnhaa	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnhc Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnhc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnhja Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnhja	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnhn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnhn	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnk Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnk	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnkn Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnkn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnkp Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnkp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc10i7fnkpa Firmware	Before fncml357.0059

Running on/with	Platform Versions
Intel Nuc10i7fnkpa	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm8i3cb4n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Cm8i3cb4n	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm8i5cb8n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Cm8i5cb8n	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm8i7cb8n Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Cm8i7cb8n	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm8ccb4r Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Cm8ccb4r	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cm8pcb4r Firmware	Before cbwhl357.0101

Running on/with	Platform Versions
Intel Cm8pcb4r	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3pnb Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc8i3pnb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3pnh Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc8i3pnh	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc8i3pnk Firmware	Before pnwhl357.0050

Running on/with	Platform Versions
Intel Nuc8i3pnk	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc9i5qn Firmware	Before qxcfl579.0071

Running on/with	Platform Versions
Intel Nuc9i5qn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc9i7qn Firmware	Before qxcfl579.0071

Running on/with	Platform Versions
Intel Nuc9i7qn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc9i9qn Firmware	Before qxcfl579.0071

Running on/with	Platform Versions
Intel Nuc9i9qn	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.