CVE-2022-38099 | Severity.io

Description

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access.

Related CPE's

intel

nuc_11_compute_element_cm11ebi38w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebi38w

intel

nuc_11_compute_element_cm11ebc4w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebc4w

intel

nuc_11_compute_element_cm11ebi58w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebi58w

intel

nuc_11_compute_element_cm11ebv58w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebv58w

intel

nuc_11_compute_element_cm11ebi716w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebi716w

intel

nuc_11_compute_element_cm11ebv716w_firmware

Vulnerable

intel

nuc_11_compute_element_cm11ebv716w

Vulnerable

Vulnerable

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Vendor Advisory

Weaknesses

[email protected]

Primary

CWE-20

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-11-11T15:15:16.297Z

3 years ago

Last modified

2024-11-21T06:15:47.363Z

1 year ago