CVE-2022-26024

published 2022-11-11

CVE-2022-26024: Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated…

Priority P4 34 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
intel	nuc7i3dnbe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i3dnhe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i3dnhnc_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i3dnke_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i3dnktc_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i5dnbe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i5dnhe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i5dnke_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i7dnbe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i7dnhe_firmware	< 1.78.2.0.7	1.78.2.0.7
intel	nuc7i7dnke_firmware	< 1.78.2.0.7	1.78.2.0.7

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-281