ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-38099

—
CVSS 3.1
7.8 high
EPSS
<1%p7
Published
()
Modified
Description

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access.

Vendors
intel
Products
nuc 11 compute element cm11ebi38w firmware, nuc 11 compute element cm11ebc4w firmware, nuc 11 compute element cm11ebi58w firmware, nuc 11 compute element cm11ebv58w firmware, nuc 11 compute element cm11ebi716w firmware, nuc 11 compute element cm11ebv716w firmware, nuc11dbbi9 firmware, nuc11dbbi7 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.