CVE-2022-37334

published 2022-11-11

CVE-2022-37334: Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an…

Priority P3 36 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
intel	nuc_11_pro_board_nuc11tnbi30z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_board_nuc11tnbi50z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_board_nuc11tnbi70z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnhi30z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnhi3_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnhi50z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnhi5_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnhi70z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnki30z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnki50z_firmware	< tntgl357.0064	tntgl357.0064
intel	nuc_11_pro_kit_nuc11tnki70z_firmware	< tntgl357.0064	tntgl357.0064

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-665