cbcvebase.
CVE-2022-36789
published 2022-11-11

CVE-2022-36789: Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may…

PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.17%
6.3th percentile
Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
intelnuc_10_performance_kit_nuc10i3fnh_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i3fnhf_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i3fnhn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i3fnk_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i3fnkn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnh_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnhf_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnhj_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnhn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnk_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnkn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i5fnkp_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnh_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnhc_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnhn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnk_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnkn_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_kit_nuc10i7fnkp_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i3fnhfa_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i3fnhja_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i5fnhca_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i5fnhja_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i5fnkpa_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i7fnhaa_firmware< fncml357.0053fncml357.0053
intelnuc_10_performance_mini_pc_nuc10i7fnhja_firmware< fncml357.0053fncml357.0053
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.