CVE-2022-36789

Published: Nov 11, 2022Modified: Feb 5, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (26)

Intel

26 products

Nuc 10 Performance Kit Nuc10i7fnhn Firmware

Nuc 10 Performance Kit Nuc10i5fnkn Firmware

Nuc 10 Performance Kit Nuc10i5fnhn Firmware

Nuc 10 Performance Kit Nuc10i7fnkn Firmware

Nuc 10 Performance Kit Nuc10i3fnhn Firmware

Nuc 10 Performance Kit Nuc10i3fnkn Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnhja Firmware

Nuc 10 Performance Kit Nuc10i3fnhf Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnhca Firmware

Nuc 10 Performance Mini Pc Nuc10i3fnhfa Firmware

Nuc 10 Performance Kit Nuc10i5fnhj Firmware

Nuc 10 Performance Kit Nuc10i7fnhc Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnhja Firmware

Nuc 10 Performance Mini Pc Nuc10i3fnhja Firmware

Nuc 10 Performance Kit Nuc10i3fnk Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnhaa Firmware

Nuc 10 Performance Kit Nuc10i5fnh Firmware

Nuc 10 Performance Kit Nuc10i5fnk Firmware

Nuc 10 Performance Kit Nuc10i7fnh Firmware

Nuc 10 Performance Kit Nuc10i5fnhf Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnkpa Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnkpa Firmware

Nuc 10 Performance Kit Nuc10i3fnh Firmware

Nuc 10 Performance Kit Nuc10i7fnk Firmware

Nuc 10 Performance Kit Nuc10i7fnkp Firmware

Nuc 10 Performance Kit Nuc10i5fnkp Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnkn Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnkn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhja Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhja	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhf Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhf	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhca Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhca	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhfa Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhfa	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhj Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhj	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhc Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhc	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhja Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhja	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhja Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhja	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnk Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnk	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhaa Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhaa	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnh Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnh	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnk Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnk	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnh Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnh	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhf Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhf	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnkpa Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnkpa	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnkpa Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnkpa	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnh Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnh	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnk Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnk	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkp Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkp	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkp Firmware	Before fncml357.0053

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkp	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.