ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-37336

—
CVSS 3.1
6.7 medium
EPSS
<1%p7
Published
()
Modified
Description

Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.

Vendors
intel
Products
nuc 10 performance kit nuc10i7fnhn firmware, nuc 10 performance kit nuc10i5fnkn firmware, nuc 10 performance kit nuc10i5fnhn firmware, nuc 10 performance kit nuc10i7fnkn firmware, nuc 10 performance kit nuc10i3fnhn firmware, nuc 10 performance kit nuc10i3fnkn firmware, nuc 10 performance mini pc nuc10i5fnhja firmware, nuc 10 performance kit nuc10i3fnhf firmware, nuc 10 performance mini pc nuc10i7fnkpa firmware, nuc 10 performance mini pc nuc10i5fnhca firmware, nuc 10 performance mini pc nuc10i3fnhfa firmware, nuc 10 performance kit nuc10i5fnhj firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.