Vulnerability-Lookup

CVE-2022-37334 (GCVE-0-2022-37334)

Vulnerability from cvelistv5 – Published: 2022-11-11 15:48 – Updated: 2025-02-05 15:28

Summary

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-29 20:40 UTC

CWE

escalation of privilege
CWE-665 - Improper Initialization

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…

Impacted products

1 product

Vendor	Product	Version	CPE status
n/a	Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards	Affected: before version TNTGL357.0064

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:29:20.900Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-37334",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T20:40:50.411828Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-665",
                "description": "CWE-665 Improper Initialization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-05T15:28:32.518Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version TNTGL357.0064"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-14T17:46:24.147Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2022-37334",
    "datePublished": "2022-11-11T15:48:54.894Z",
    "dateReserved": "2022-08-04T03:00:21.630Z",
    "dateUpdated": "2025-02-05T15:28:32.518Z",
    "requesterUserId": "e1538295-92a9-4bd5-bb63-88a76fc3a35c",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-37334",
      "date": "2026-09-21",
      "epss": "0.00166",
      "percentile": "0.0629"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi70z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "42F05D4B-288C-4505-B7C6-8F63BD74C014",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi70z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ED80AFBA-11FE-4207-9459-C4D3B817D953",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki70z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B4A3FE3F-28A0-42E9-9807-09C6942EFCC9",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki70z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "266B088B-9E37-4FF4-BA5E-E8DA8E573267",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki30z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E3D7087F-4309-4009-84F0-E9EE2A68D78E",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki30z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "948F8845-03D3-4BF7-8E73-28B8EEE91202",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi30z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "72F005FB-1776-456E-89AE-352F731946E3",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi30z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DF048967-A60F-4B2F-9006-44A747B7315C",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki50z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6E023AD0-EA92-43C0-9152-391A22D7ED41",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki50z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8592EBE4-93FE-4ECF-839E-67BD61EF0674",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi50z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AF282846-49A9-4F40-9102-8DFC1FBA8CB0",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi50z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "FF882AD9-8F45-4ACA-AD3B-0FDC5EC2337C",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi30z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8435CE49-FC3D-491E-9028-0C874A0CC2F7",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi30z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "71B0FAED-9CE3-436F-83A2-A4F6A6535755",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi50z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7095959D-6FDC-4932-A0C4-07E35EADCB0C",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi50z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B91A8B36-5B81-4CDF-8811-60C33C5638BC",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi70z_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "607F6F05-CF6D-403B-9373-D4260E7CF32B",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi70z:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AD064153-36F0-40FB-AEA3-624E339CDEAB",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi3_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CDD187DB-D796-4B77-A3A7-3E23B509A951",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi3:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "F34EF7F8-07DF-4A54-927D-D4329A68C291",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi5_firmware:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "1210AF73-CAE3-4CB3-9101-900A026E0476",
                  "versionEndExcluding": "tntgl357.0064",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi5:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B5FC742B-B63A-4EF3-AB0C-CE3FF0884342",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
        },
        {
          "lang": "es",
          "value": "La inicializaci\u00f3n incorrecta en el firmware del BIOS para Intel(R) NUC 11 Pro Kits y Intel(R) NUC 11 Pro Boards anteriores a la versi\u00f3n TNTGL357.0064 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."
        }
      ],
      "id": "CVE-2022-37334",
      "lastModified": "2024-11-21T07:14:46.670",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.1,
            "impactScore": 6.0,
            "source": "secure@intel.com",
            "type": "Secondary"
          },
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.8,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-11-11T16:15:16.140",
      "references": [
        {
          "source": "secure@intel.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
        }
      ],
      "sourceIdentifier": "secure@intel.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-665"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "before version TNTGL357.0064"
                  }
                ]
              }
            ],
            "source": "secure@intel.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi70z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42F05D4B-288C-4505-B7C6-8F63BD74C014",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi70z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ED80AFBA-11FE-4207-9459-C4D3B817D953",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki70z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B4A3FE3F-28A0-42E9-9807-09C6942EFCC9",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki70z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "266B088B-9E37-4FF4-BA5E-E8DA8E573267",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki30z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3D7087F-4309-4009-84F0-E9EE2A68D78E",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki30z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "948F8845-03D3-4BF7-8E73-28B8EEE91202",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi30z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "72F005FB-1776-456E-89AE-352F731946E3",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi30z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DF048967-A60F-4B2F-9006-44A747B7315C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki50z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6E023AD0-EA92-43C0-9152-391A22D7ED41",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki50z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8592EBE4-93FE-4ECF-839E-67BD61EF0674",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi50z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF282846-49A9-4F40-9102-8DFC1FBA8CB0",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi50z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FF882AD9-8F45-4ACA-AD3B-0FDC5EC2337C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi30z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8435CE49-FC3D-491E-9028-0C874A0CC2F7",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi30z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "71B0FAED-9CE3-436F-83A2-A4F6A6535755",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi50z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7095959D-6FDC-4932-A0C4-07E35EADCB0C",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi50z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B91A8B36-5B81-4CDF-8811-60C33C5638BC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi70z_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "607F6F05-CF6D-403B-9373-D4260E7CF32B",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi70z:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD064153-36F0-40FB-AEA3-624E339CDEAB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi3_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDD187DB-D796-4B77-A3A7-3E23B509A951",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi3:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F34EF7F8-07DF-4A54-927D-D4329A68C291",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi5_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1210AF73-CAE3-4CB3-9101-900A026E0476",
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5FC742B-B63A-4EF3-AB0C-CE3FF0884342",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
          },
          {
            "lang": "es",
            "value": "La inicializaci\u00f3n incorrecta en el firmware del BIOS para Intel(R) NUC 11 Pro Kits y Intel(R) NUC 11 Pro Boards anteriores a la versi\u00f3n TNTGL357.0064 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."
          }
        ],
        "id": "CVE-2022-37334",
        "lastModified": "2026-06-17T04:54:54.067",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.1,
              "impactScore": 6.0,
              "source": "secure@intel.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2022-37334",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T20:40:50.411828Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2022-11-11T16:15:16.140",
        "references": [
          {
            "source": "secure@intel.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
          }
        ],
        "sourceIdentifier": "secure@intel.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-665"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-665"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T10:29:20.900Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-37334",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-01-29T20:40:50.411828Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-665",
                    "description": "CWE-665 Improper Initialization",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-01-29T20:40:51.852Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "before version TNTGL357.0064"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "escalation of privilege",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-11-14T17:46:24.147Z",
            "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
            "shortName": "intel"
          },
          "references": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "assignerShortName": "intel",
        "cveId": "CVE-2022-37334",
        "datePublished": "2022-11-11T15:48:54.894Z",
        "dateReserved": "2022-08-04T03:00:21.630Z",
        "dateUpdated": "2025-02-05T15:28:32.518Z",
        "requesterUserId": "e1538295-92a9-4bd5-bb63-88a76fc3a35c",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2022-AVI-1009

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Intel. Elles permettent à un attaquant de provoquer un déni de service, une atteinte à la confidentialité des données et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Intel	N/A	Intel MC versions antérieures à 2.3.2
Intel	N/A	Intel EMA versions antérieures à 1.7.1
Intel	N/A	Intel Quartus Prime Pro edition software versions antérieures à 22.1
Intel	N/A	Intel CSME versions antérieures à 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25
Intel	N/A	Intel PROSet/Wireless WiFi UEFI drivers versions antérieures à 2.2.14.22176
Intel	N/A	Intel SPS versions antérieures à SPS_E3_04.01.04.700.0, SPS_E3_06.00.03.035.0
Intel	N/A	Intel SDP Tool versions antérieures à 3.0.0
Intel	N/A	Intel NUC HDMI Firmware Update Tool pour NUC7i3DN, NUC7i5DN et NUC7i7DN versions antérieures à 1.78.2.0.7.
Intel	N/A	Intel Advanced Link Analyzer Pro versions antérieures à 22.2
Intel	N/A	PresentMon versions antérieures à 1.7.1
Intel	N/A	Intel NUC Kit Wireless Adapter driver installer software versions antérieures à 22.40.0
Intel	N/A	Intel SGX SDK software pour Linux versions antérieures à 2.18.100.1
Intel	N/A	Intel Glorp gaming particle physics demonstration software version 1.0.0
Intel	N/A	Les produits Intel vPRO CSME WiFi sans la dernière mise à jour
Intel	N/A	Intel Advanced Link Analyzer Standrad versions antérieures à 22.1.1 STD
Intel	N/A	Intel XMM 7560 Modem M.2 sans la dernière mise à jour
Intel	N/A	Intel Server System R1000WF, R200WF et Intel Server Board S2600WF sans la dernière mise à jour
Intel	N/A	Intel EMA versions antérieures à 1.8.0
Intel	N/A	Intel Server Board M50CYP sans la dernière mise à jour
Intel	N/A	Intel PROSet/Wireless WiFi versions antérieures à 22.140
Intel	N/A	Intel Processors sans la dernière mise à jour
Intel	N/A	Intel VTune Profiler software versions antérieures à 2022.2.0
Intel	N/A	Intel NUC BIOS Firmware sans la dernière mise à jour
Intel	N/A	Intel Quartus Prime Standard edition software versions antérieures à 21.1 Patch 0.02std
Intel	N/A	Intel Server Board M10JNP sans la dernière mise à jour
Intel	N/A	Intel AMT versions antérieures à 11.8.93, 11.22.93, 12.0.92, 14.1.67, 15.0.42, 16.0
Intel	N/A	Killer WiFi versions antérieures à 3.1122.3158
Intel	N/A	Intel Distribution of OpenVINO Toolkit versions antérieures à 2021.4.2
Intel	N/A	Intel SGX SDK software pour Windows versions antérieures à 2.17.100.1
Intel	N/A	Intel AMT SDK versions antérieures à 16.0.4.1
Intel	N/A	Hyperscan library versions antérieures à 5.4.0
Intel	N/A	Intel System Studio toutes versions
Intel	N/A	Intel WAPI Security sans la dernière mise à jour
Intel	N/A	Intel DCM versions antérieures à 5.0
Intel	N/A	Intel Support Android application versions antérieures à 22.02.28

References

Title

Publication Time

CERTFR-2022-AVI-1009

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Intel	N/A	Intel MC versions antérieures à 2.3.2
Intel	N/A	Intel EMA versions antérieures à 1.7.1
Intel	N/A	Intel Quartus Prime Pro edition software versions antérieures à 22.1
Intel	N/A	Intel CSME versions antérieures à 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25
Intel	N/A	Intel PROSet/Wireless WiFi UEFI drivers versions antérieures à 2.2.14.22176
Intel	N/A	Intel SPS versions antérieures à SPS_E3_04.01.04.700.0, SPS_E3_06.00.03.035.0
Intel	N/A	Intel SDP Tool versions antérieures à 3.0.0
Intel	N/A	Intel NUC HDMI Firmware Update Tool pour NUC7i3DN, NUC7i5DN et NUC7i7DN versions antérieures à 1.78.2.0.7.
Intel	N/A	Intel Advanced Link Analyzer Pro versions antérieures à 22.2
Intel	N/A	PresentMon versions antérieures à 1.7.1
Intel	N/A	Intel NUC Kit Wireless Adapter driver installer software versions antérieures à 22.40.0
Intel	N/A	Intel SGX SDK software pour Linux versions antérieures à 2.18.100.1
Intel	N/A	Intel Glorp gaming particle physics demonstration software version 1.0.0
Intel	N/A	Les produits Intel vPRO CSME WiFi sans la dernière mise à jour
Intel	N/A	Intel Advanced Link Analyzer Standrad versions antérieures à 22.1.1 STD
Intel	N/A	Intel XMM 7560 Modem M.2 sans la dernière mise à jour
Intel	N/A	Intel Server System R1000WF, R200WF et Intel Server Board S2600WF sans la dernière mise à jour
Intel	N/A	Intel EMA versions antérieures à 1.8.0
Intel	N/A	Intel Server Board M50CYP sans la dernière mise à jour
Intel	N/A	Intel PROSet/Wireless WiFi versions antérieures à 22.140
Intel	N/A	Intel Processors sans la dernière mise à jour
Intel	N/A	Intel VTune Profiler software versions antérieures à 2022.2.0
Intel	N/A	Intel NUC BIOS Firmware sans la dernière mise à jour
Intel	N/A	Intel Quartus Prime Standard edition software versions antérieures à 21.1 Patch 0.02std
Intel	N/A	Intel Server Board M10JNP sans la dernière mise à jour
Intel	N/A	Intel AMT versions antérieures à 11.8.93, 11.22.93, 12.0.92, 14.1.67, 15.0.42, 16.0
Intel	N/A	Killer WiFi versions antérieures à 3.1122.3158
Intel	N/A	Intel Distribution of OpenVINO Toolkit versions antérieures à 2021.4.2
Intel	N/A	Intel SGX SDK software pour Windows versions antérieures à 2.17.100.1
Intel	N/A	Intel AMT SDK versions antérieures à 16.0.4.1
Intel	N/A	Hyperscan library versions antérieures à 5.4.0
Intel	N/A	Intel System Studio toutes versions
Intel	N/A	Intel WAPI Security sans la dernière mise à jour
Intel	N/A	Intel DCM versions antérieures à 5.0
Intel	N/A	Intel Support Android application versions antérieures à 22.02.28

References

Title

Publication Time

FKIE_CVE-2022-37334

Vulnerability from fkie_nvd - Published: 2022-11-11 16:15 - Updated: 2026-06-17 04:54

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	secure@intel.com	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
intel	nuc_11_pro_kit_nuc11tnhi70z_firmware	*
intel	nuc_11_pro_kit_nuc11tnhi70z	-
intel	nuc_11_pro_kit_nuc11tnki70z_firmware	*
intel	nuc_11_pro_kit_nuc11tnki70z	-
intel	nuc_11_pro_kit_nuc11tnki30z_firmware	*
intel	nuc_11_pro_kit_nuc11tnki30z	-
intel	nuc_11_pro_kit_nuc11tnhi30z_firmware	*
intel	nuc_11_pro_kit_nuc11tnhi30z	-
intel	nuc_11_pro_kit_nuc11tnki50z_firmware	*
intel	nuc_11_pro_kit_nuc11tnki50z	-
intel	nuc_11_pro_kit_nuc11tnhi50z_firmware	*
intel	nuc_11_pro_kit_nuc11tnhi50z	-
intel	nuc_11_pro_board_nuc11tnbi30z_firmware	*
intel	nuc_11_pro_board_nuc11tnbi30z	-
intel	nuc_11_pro_board_nuc11tnbi50z_firmware	*
intel	nuc_11_pro_board_nuc11tnbi50z	-
intel	nuc_11_pro_board_nuc11tnbi70z_firmware	*
intel	nuc_11_pro_board_nuc11tnbi70z	-
intel	nuc_11_pro_kit_nuc11tnhi3_firmware	*
intel	nuc_11_pro_kit_nuc11tnhi3	-
intel	nuc_11_pro_kit_nuc11tnhi5_firmware	*
intel	nuc_11_pro_kit_nuc11tnhi5	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version TNTGL357.0064"
            }
          ]
        }
      ],
      "source": "secure@intel.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi70z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42F05D4B-288C-4505-B7C6-8F63BD74C014",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi70z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED80AFBA-11FE-4207-9459-C4D3B817D953",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki70z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4A3FE3F-28A0-42E9-9807-09C6942EFCC9",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki70z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "266B088B-9E37-4FF4-BA5E-E8DA8E573267",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki30z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3D7087F-4309-4009-84F0-E9EE2A68D78E",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki30z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "948F8845-03D3-4BF7-8E73-28B8EEE91202",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi30z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "72F005FB-1776-456E-89AE-352F731946E3",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi30z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF048967-A60F-4B2F-9006-44A747B7315C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki50z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E023AD0-EA92-43C0-9152-391A22D7ED41",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki50z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8592EBE4-93FE-4ECF-839E-67BD61EF0674",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi50z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF282846-49A9-4F40-9102-8DFC1FBA8CB0",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi50z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF882AD9-8F45-4ACA-AD3B-0FDC5EC2337C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi30z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8435CE49-FC3D-491E-9028-0C874A0CC2F7",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi30z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "71B0FAED-9CE3-436F-83A2-A4F6A6535755",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi50z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7095959D-6FDC-4932-A0C4-07E35EADCB0C",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi50z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B91A8B36-5B81-4CDF-8811-60C33C5638BC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi70z_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "607F6F05-CF6D-403B-9373-D4260E7CF32B",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi70z:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD064153-36F0-40FB-AEA3-624E339CDEAB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi3_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDD187DB-D796-4B77-A3A7-3E23B509A951",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi3:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F34EF7F8-07DF-4A54-927D-D4329A68C291",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1210AF73-CAE3-4CB3-9101-900A026E0476",
              "versionEndExcluding": "tntgl357.0064",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5FC742B-B63A-4EF3-AB0C-CE3FF0884342",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "La inicializaci\u00f3n incorrecta en el firmware del BIOS para Intel(R) NUC 11 Pro Kits y Intel(R) NUC 11 Pro Boards anteriores a la versi\u00f3n TNTGL357.0064 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."
    }
  ],
  "id": "CVE-2022-37334",
  "lastModified": "2026-06-17T04:54:54.067",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.1,
        "impactScore": 6.0,
        "source": "secure@intel.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-37334",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-01-29T20:40:50.411828Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2022-11-11T16:15:16.140",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-7X5C-HVWV-CHX9

Vulnerability from github – Published: 2022-11-11 19:00 – Updated: 2022-11-16 19:00

Details

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-37334"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-665"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-11-11T16:15:00Z",
    "severity": "HIGH"
  },
  "details": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.",
  "id": "GHSA-7x5c-hvwv-chx9",
  "modified": "2022-11-16T19:00:28Z",
  "published": "2022-11-11T19:00:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37334"
    },
    {
      "type": "WEB",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-37334

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-37334

Aliases

CVE-2022-37334

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-37334",
    "description": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.",
    "id": "GSD-2022-37334"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-37334"
      ],
      "details": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.",
      "id": "GSD-2022-37334",
      "modified": "2023-12-13T01:19:13.699655Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@intel.com",
        "ID": "CVE-2022-37334",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "before version TNTGL357.0064"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "escalation of privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
            "refsource": "MISC",
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi70z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi70z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki70z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki70z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki30z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki30z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi30z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi30z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnki50z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnki50z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi50z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi50z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi30z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi30z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi50z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi50z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_board_nuc11tnbi70z_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_board_nuc11tnbi70z:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi3_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi3:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:intel:nuc_11_pro_kit_nuc11tnhi5_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "tntgl357.0064",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:intel:nuc_11_pro_kit_nuc11tnhi5:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2022-37334"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-665"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-11-16T16:59Z",
      "publishedDate": "2022-11-11T16:15Z"
    }
  }
}

WID-SEC-W-2022-1987

Vulnerability from csaf_certbund - Published: 2022-11-08 23:00 - Updated: 2024-12-16 23:00

Summary

Intel NUC Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Severity

Hoch

Scope

18 vulnerabilities in this advisory, including CVE-2022-37334.

CVE-2022-37334

In der Intel NUC Firmware existieren mehrere Schwachstellen. Diese sind auf unzureichende Eingabevalidierung, fehlerhafte Zugriffskontrollen, fehlerhafte Speicherbegrenzungen, Fehler bei der Authentisierung sowie Fehler bei der Initialisierung zurückzuführen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-37334 (GCVE-0-2022-37334)

CERTFR-2022-AVI-1009

Solution

CERTFR-2022-AVI-1009

Solution

FKIE_CVE-2022-37334

GHSA-7X5C-HVWV-CHX9

GSD-2022-37334

WID-SEC-W-2022-1987

Tags

Sightings

Nomenclature

Related by attack behaviour