Lucene search

K
cvelistIntelCVELIST:CVE-2022-36370
HistoryNov 11, 2022 - 3:48 p.m.

CVE-2022-36370

2022-11-1115:48:54
intel
www.cve.org
3
cve-2022-36370
intel nuc boards
firmware
privileged user
escalation of privilege
local access

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Improper authentication in BIOS firmware for some Intelยฎ NUC Boards and Intelยฎ NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Boards and Intel(R) NUC Kits",
    "versions": [
      {
        "version": "before version MYi30060",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2022-36370