CVE-2022-37336

Published: Aug 11, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (26)

Intel

26 products

Nuc 10 Performance Kit Nuc10i7fnhn Firmware

Nuc 10 Performance Kit Nuc10i5fnkn Firmware

Nuc 10 Performance Kit Nuc10i5fnhn Firmware

Nuc 10 Performance Kit Nuc10i7fnkn Firmware

Nuc 10 Performance Kit Nuc10i3fnhn Firmware

Nuc 10 Performance Kit Nuc10i3fnkn Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnhja Firmware

Nuc 10 Performance Kit Nuc10i3fnhf Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnkpa Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnhca Firmware

Nuc 10 Performance Mini Pc Nuc10i3fnhfa Firmware

Nuc 10 Performance Kit Nuc10i5fnhj Firmware

Nuc 10 Performance Kit Nuc10i7fnhc Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnhja Firmware

Nuc 10 Performance Mini Pc Nuc10i3fnhja Firmware

Nuc 10 Performance Kit Nuc10i3fnk Firmware

Nuc 10 Performance Mini Pc Nuc10i7fnhaa Firmware

Nuc 10 Performance Kit Nuc10i5fnh Firmware

Nuc 10 Performance Kit Nuc10i5fnk Firmware

Nuc 10 Performance Kit Nuc10i7fnh Firmware

Nuc 10 Performance Kit Nuc10i5fnhf Firmware

Nuc 10 Performance Mini Pc Nuc10i5fnkpa Firmware

Nuc 10 Performance Kit Nuc10i3fnh Firmware

Nuc 10 Performance Kit Nuc10i7fnk Firmware

Nuc 10 Performance Kit Nuc10i7fnkp Firmware

Nuc 10 Performance Kit Nuc10i5fnkp Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhn	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkn	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhn	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnkn Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnkn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhja Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhja	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhf Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnhf	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnkpa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnkpa	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhca Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnhca	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhfa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhfa	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhj Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhj	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhc Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnhc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhja Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhja	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhja Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i3fnhja	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnk Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnk	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhaa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i7fnhaa	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnh	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnk Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnk	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnh	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhf Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnhf	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnkpa Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Mini Pc Nuc10i5fnkpa	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i3fnh Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i3fnh	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnk Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnk	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkp Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i7fnkp	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkp Firmware	All versions

Running on/with	Platform Versions
Intel Nuc 10 Performance Kit Nuc10i5fnkp	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

Source: secure@intel.com

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.