CVE-2022-33176

published 2022-11-11

CVE-2022-33176: Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
intel	nuc_11_performance_kit_nuc11pahi30z_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11pahi3_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11pahi50z_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11pahi5_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11pahi70z_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11pahi7_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11paki3_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11paki5_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_kit_nuc11paki7_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_mini_pc_nuc11paqi50wa_firmware	< patgl357.0042	patgl357.0042
intel	nuc_11_performance_mini_pc_nuc11paqi70qa_firmware	< patgl357.0042	patgl357.0042

CWE-20