ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-37345

—
CVSS 3.1
7.8 high
EPSS
<1%p5
Published
()
Modified
Description

Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendors
intel
Products
nuc kit nuc5i3ryh firmware, nuc kit nuc5i7ryh firmware, nuc kit nuc5i5ryk firmware, nuc kit nuc5i5ryh firmware, nuc kit nuc5i3ryk firmware, nuc kit nuc5i5ryhs firmware, nuc kit nuc5i3ryhs firmware, nuc kit nuc5i3ryhsn firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.