CVE-2022-34152

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.7MEDIUM
EPSS
0.1%
top 66.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel NUC Board De3815tybe FirmwareIntel NUC KIT De3815tykhe Firmware
Timeline
PublishedNov 11

Description

Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:HExploitability: 1.1 | Impact: 6.0

Affected Packages2 packages

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-23q5-hv3c-8qvj: Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may allow a privileged user to potent↗2022-11-11
▶
CVEList
CVE-2022-34152: Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may allow a privileged user to potent↗2022-11-11
▶