Lucene search

IntelCVE-2022-27229

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2022-27229

2023-11-1419:15:10

CWE-249

CWE-22

intel

web.nvd.nist.gov

cve-2022-27229

intel nuc kits

firmware update

path transversal

privilege escalation

security vulnerability

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

10.5%

JSON

Path transversal in some Intel® NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Vulnrichment

Node

intelnuc_7_business_nuc7i3dnhncMatch-

intelnuc_7_business_nuc7i3dnktcMatch-

intelnuc_7_business_nuc7i5dnkpcMatch-

intelnuc_7_business_nuc7i5dnkpuMatch-

intelnuc_kit_nuc7i3dnheMatch-

intelnuc_kit_nuc7i3dnkeMatch-

intelnuc_kit_nuc7i5dnheMatch-

intelnuc_kit_nuc7i5dnkeMatch-

intelnuc_kit_nuc7i7dnheMatch-

intelnuc_kit_nuc7i7dnkeMatch-

AND

intelhdmi_firmwareRange<1.79.1.1

VendorProductVersionCPE
intelnuc_7_business_nuc7i3dnhnc-cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i3dnktc-cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i5dnkpc-cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i5dnkpu-cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i3dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i3dnke-cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i5dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i5dnke-cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i7dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i7dnke-cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	nuc_7_business_nuc7i3dnhnc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:::::::*
intel	nuc_7_business_nuc7i3dnktc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:::::::*
intel	nuc_7_business_nuc7i5dnkpc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:::::::*
intel	nuc_7_business_nuc7i5dnkpu	-	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:::::::*
intel	nuc_kit_nuc7i3dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:::::::*
intel	nuc_kit_nuc7i3dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:::::::*
intel	nuc_kit_nuc7i5dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:::::::*
intel	nuc_kit_nuc7i5dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:::::::*
intel	nuc_kit_nuc7i7dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:::::::*
intel	nuc_kit_nuc7i7dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:::::::*

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software",
    "versions": [
      {
        "version": "before version 1.79.1.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

10.5%

JSON

Related for CVE-2022-27229