VulnerabilityModified
CVE-2022-32582
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.
MEDIUM 4.4EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.
- CVSS 3.1
- 4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- intel/nuc 11 performance kit nuc11pahi70z firmware · intel/nuc 11 performance kit nuc11pahi50z firmware · intel/nuc 11 performance kit nuc11pahi30z firmware · intel/nuc 11 performance kit nuc11pahi3 firmware · intel/nuc 11 performance kit nuc11pahi5 firmware · intel/nuc 11 performance kit nuc11pahi7 firmware · intel/nuc 11 performance kit nuc11paki3 firmware · intel/nuc 11 performance kit nuc11paki5 firmware · intel/nuc 11 performance kit nuc11paki7 firmware · intel/nuc 11 performance mini pc nuc11paqi70qa firmware · intel/nuc 11 performance mini pc nuc11paqi50wa firmware · intel/nuc 9 pro compute element nuc9v7qnb firmware · intel/nuc 9 pro compute element nuc9vxqnb firmware · intel/nuc 9 pro kit nuc9vxqnx firmware · intel/nuc 9 pro kit nuc9v7qnx firmware · intel/nuc 11 pro kit nuc11tnhi70z firmware · intel/nuc 11 pro kit nuc11tnki70z firmware · intel/nuc 11 pro kit nuc11tnki30z firmware · intel/nuc 11 pro kit nuc11tnhi30z firmware · intel/nuc 11 pro kit nuc11tnki50z firmware · +19 more
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.