Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
17 Nov 2022, 15:45
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| CWE | CWE-287 | |
| First Time |
Intel nuc Kit Nuc8i7hvk
Intel nuc 8 Business Nuc8i7hnkqc Intel nuc 8 Enthusiast Nuc8i7hvkvaw Intel nuc Kit Nuc8i7hnk Firmware Intel nuc 8 Business Nuc8i7hnkqc Firmware Intel nuc Kit Nuc8i7hvk Firmware Intel nuc 8 Enthusiast Nuc8i7hvkvaw Firmware Intel nuc Kit Nuc8i7hnk Intel nuc 8 Enthusiast Nuc8i7hvkva Firmware Intel Intel nuc 8 Enthusiast Nuc8i7hvkva |
|
| CPE | cpe:2.3:o:intel:nuc_8_enthusiast_nuc8i7hvkva_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:intel:nuc_kit_nuc8i7hvk_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_kit_nuc8i7hvk:-:*:*:*:*:*:*:* cpe:2.3:o:intel:nuc_8_enthusiast_nuc8i7hvkvaw_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:intel:nuc_8_business_nuc8i7hnkqc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_8_business_nuc8i7hnkqc:-:*:*:*:*:*:*:* cpe:2.3:o:intel:nuc_kit_nuc8i7hnk_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkva:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkvaw:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html - Vendor Advisory |
11 Nov 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-11 16:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-21794
Mitre link : CVE-2022-21794
CVE.ORG link : CVE-2022-21794
JSON object : View
Products Affected
intel
- nuc_8_enthusiast_nuc8i7hvkva_firmware
- nuc_kit_nuc8i7hnk
- nuc_8_business_nuc8i7hnkqc_firmware
- nuc_kit_nuc8i7hvk
- nuc_8_enthusiast_nuc8i7hvkvaw
- nuc_kit_nuc8i7hvk_firmware
- nuc_8_enthusiast_nuc8i7hvkvaw_firmware
- nuc_kit_nuc8i7hnk_firmware
- nuc_8_business_nuc8i7hnkqc
- nuc_8_enthusiast_nuc8i7hvkva
CWE
CWE-287
Improper Authentication