CVE-2022-37327

published 2023-05-10

CVE-2022-37327: Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element…

Priority P4 22 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

Affected

116 ranges · showing 25

Vendor	Product	Version range	Fixed in
intel	cm11ebc4w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi38w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi58w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm11ebi716w_firmware	< ebtgl357.0071	ebtgl357.0071
intel	cm8ccb4r_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i3cb4n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i5cb8n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8i7cb8n_firmware	< cbwhl357.0101	cbwhl357.0101
intel	cm8pcb4r_firmware	< cbwhl357.0101	cbwhl357.0101
intel	elm12hbc_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi3_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi5_firmware	< hbadl357.0052	hbadl357.0052
intel	elm12hbi7_firmware	< hbadl357.0052	hbadl357.0052
intel	lapac71g_firmware	< acadl357.0059	acadl357.0059
intel	lapac71h_firmware	< acadl357.0059	acadl357.0059
intel	lapbc510_firmware	< bctgl357.0078	bctgl357.0078
intel	lapbc710_firmware	< bctgl357.0078	bctgl357.0078
intel	lapkc51e_firmware	< kctgl357.0044	kctgl357.0044
intel	lapkc71e_firmware	< kctgl357.0044	kctgl357.0044
intel	lapkc71f_firmware	< kctgl357.0044	kctgl357.0044
intel	laprc510_firmware	< rcadl357.0060	rcadl357.0060
intel	laprc710_firmware	< rcadl357.0060	rcadl357.0060
intel	nuc10i3fnh_firmware	< fncml357.0059	fncml357.0059
intel	nuc10i3fnhf_firmware	< fncml357.0059	fncml357.0059
intel	nuc10i3fnhfa_firmware	< fncml357.0059	fncml357.0059

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20