Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Nuc7cjyh
HWIntelall versionsIntel Nuc7cjyh Firmware
OSIntelall versionsIntel Nuc7cjyhn
HWIntelall versionsIntel Nuc7cjyhn Firmware
OSIntelall versionsIntel Nuc7cjysal
HWIntelall versionsIntel Nuc7cjysal Firmware
OSIntelall versionsIntel Nuc7cjysamn
HWIntelall versionsIntel Nuc7cjysamn Firmware
OSIntelall versionsIntel Nuc7pjyh
HWIntelall versionsIntel Nuc7pjyh Firmware
OSIntelall versionsIntel Nuc7pjyhn
HWIntelall versionsIntel Nuc7pjyhn Firmware
OSIntelall versionsIntel Nuc8cchb
HWIntelall versionsIntel Nuc8cchb Firmware
OSIntelall versionsIntel Nuc8cchbn
HWIntelall versionsIntel Nuc8cchbn Firmware
OSIntelall versionsIntel Nuc8cchkr
HWIntelall versionsIntel Nuc8cchkr Firmware
OSIntelall versionsIntel Nuc8cchkrn
HWIntelall versionsIntel Nuc8cchkrn Firmware
OSIntelall versionsIntel Nuc8i3cysn
HWIntelall versionsIntel Nuc8i3cysn Firmware
OSIntelall versionsIntel Nuc8i5inh
HWIntelall versionsIntel Nuc8i5inh Firmware
OSIntelall versionsIntel Nuc8i7hnk
HWIntelall versionsIntel Nuc8i7hnk Firmware
OSIntelall versionsIntel Nuc8i7hnkqc
HWIntelall versionsIntel Nuc8i7hnkqc Firmware
OSIntelall versionsIntel Nuc8i7hvk
HWIntelall versionsIntel Nuc8i7hvk Firmware
OSIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2017-5691CRITICAL9.0PL ✓same product
Błędna weryfikacja w procesorach Intel umożliwia naruszenie ochrony SGX
CVE-2019-14610HIGH7.8same product
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable ...
CVE-2019-14608HIGH7.8same product
Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially en...
CVE-2022-21237MEDIUM6.7same product
Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable es...
CVE-2022-24297MEDIUM6.7same product
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially ena...