CVE-2022-27229

2023-11-1419:15:10

CWE-249

CWE-22

[email protected]

web.nvd.nist.gov

cve-2022-27229

intel nuc kits

path transversal

firmware update

escalation of privilege

local access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

10.5%

JSON

Path transversal in some Intel® NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Node

intelnuc_7_business_nuc7i3dnhncMatch-

intelnuc_7_business_nuc7i3dnktcMatch-

intelnuc_7_business_nuc7i5dnkpcMatch-

intelnuc_7_business_nuc7i5dnkpuMatch-

intelnuc_kit_nuc7i3dnheMatch-

intelnuc_kit_nuc7i3dnkeMatch-

intelnuc_kit_nuc7i5dnheMatch-

intelnuc_kit_nuc7i5dnkeMatch-

intelnuc_kit_nuc7i7dnheMatch-

intelnuc_kit_nuc7i7dnkeMatch-

AND

intelhdmi_firmwareRange<1.79.1.1

VendorProductVersionCPE
intelnuc_7_business_nuc7i3dnhnc-cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i3dnktc-cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i5dnkpc-cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:*:*:*:*:*:*:*
intelnuc_7_business_nuc7i5dnkpu-cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i3dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i3dnke-cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i5dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i5dnke-cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i7dnhe-cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:*:*:*:*:*:*:*
intelnuc_kit_nuc7i7dnke-cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	nuc_7_business_nuc7i3dnhnc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:::::::*
intel	nuc_7_business_nuc7i3dnktc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:::::::*
intel	nuc_7_business_nuc7i5dnkpc	-	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:::::::*
intel	nuc_7_business_nuc7i5dnkpu	-	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:::::::*
intel	nuc_kit_nuc7i3dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:::::::*
intel	nuc_kit_nuc7i3dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:::::::*
intel	nuc_kit_nuc7i5dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:::::::*
intel	nuc_kit_nuc7i5dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:::::::*
intel	nuc_kit_nuc7i7dnhe	-	cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:::::::*
intel	nuc_kit_nuc7i7dnke	-	cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:::::::*