VulnerabilityModified
CVE-2022-33176
Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.
MEDIUM 6.7EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/nuc 11 performance kit nuc11pahi30z firmware · intel/nuc 11 performance kit nuc11pahi50z firmware · intel/nuc 11 performance kit nuc11pahi70z firmware · intel/nuc 11 performance kit nuc11pahi3 firmware · intel/nuc 11 performance kit nuc11pahi5 firmware · intel/nuc 11 performance kit nuc11pahi7 firmware · intel/nuc 11 performance kit nuc11paki3 firmware · intel/nuc 11 performance kit nuc11paki5 firmware · intel/nuc 11 performance kit nuc11paki7 firmware · intel/nuc 11 performance mini pc nuc11paqi50wa firmware · intel/nuc 11 performance mini pc nuc11paqi70qa firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.