CVE-2022-36339

published 2023-05-10

CVE-2022-36339: Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a…

Priority P3 37 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
intel	cm11ebc4w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi38w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi58w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi716w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm8ccb4r_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i3cb4n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i5cb8n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i7cb8n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8pcb4r_firmware	< cbwhl357.0101	cbwhl357.0101
intel	elm12hbc_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi3_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi5_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi7_firmware	< hbadl357.0052	hbadl357.0052

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20