Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Cm11ebc4w
HWIntelall versionsIntel Cm11ebc4w Firmware
OSIntel< ebtgl357.0071Intel Cm11ebi38w
HWIntelall versionsIntel Cm11ebi38w Firmware
OSIntel< ebtgl357.0071Intel Cm11ebi58w
HWIntelall versionsIntel Cm11ebi58w Firmware
OSIntel< ebtgl357.0071Intel Cm11ebi716w
HWIntelall versionsIntel Cm11ebi716w Firmware
OSIntel< ebtgl357.0071Intel Cm8ccb4r
HWIntelall versionsIntel Cm8ccb4r Firmware
OSIntel< cbwhl357.0101Intel Cm8i3cb4n
HWIntelall versionsIntel Cm8i3cb4n Firmware
OSIntel< cbwhl357.0101Intel Cm8i5cb8n
HWIntelall versionsIntel Cm8i5cb8n Firmware
OSIntel< cbwhl357.0101Intel Cm8i7cb8n
HWIntelall versionsIntel Cm8i7cb8n Firmware
OSIntel< cbwhl357.0101Intel Cm8pcb4r
HWIntelall versionsIntel Cm8pcb4r Firmware
OSIntel< cbwhl357.0101Intel Elm12hbc
HWIntelall versionsIntel Elm12hbc Firmware
OSIntel< hbadl357.0052Intel Elm12hbi3
HWIntelall versionsIntel Elm12hbi3 Firmware
OSIntel< hbadl357.0052Intel Elm12hbi5
HWIntelall versionsIntel Elm12hbi5 Firmware
OSIntel< hbadl357.0052Intel Elm12hbi7
HWIntelall versionsIntel Elm12hbi7 Firmware
OSIntel< hbadl357.0052
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2022-34147HIGH7.5same product
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performan...
CVE-2022-31477MEDIUM4.0same product
Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable ...
CVE-2022-37327MEDIUM6.1same product
Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Perfor...
CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor
Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup
CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same vendor
Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup