← Back

CVE-2022-34152

nvd nist
Published: Nov 11, 2022Modified: Feb 5, 2025

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (2)

Intel
2 products
Nuc Board De3815tybe Firmware
Nuc Kit De3815tykhe Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc Board De3815tybe Firmware
Before ty0070
Running on/withPlatform Versions
Intel
Nuc Board De3815tybe
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nuc Kit De3815tykhe Firmware
Before ty0070
Running on/withPlatform Versions
Intel
Nuc Kit De3815tykhe
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.