NetSight
high7.5

CVE-2022-36339

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileg…

Impact

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelCm8i3cb4n Firmware
before cbwhl357.0101
IntelCm8i5cb8n Firmware
before cbwhl357.0101
IntelCm8i7cb8n Firmware
before cbwhl357.0101
IntelCm8ccb4r Firmware
before cbwhl357.0101
IntelCm8pcb4r Firmware
before cbwhl357.0101
IntelCm11ebi38w Firmware
before ebtgl357.0071
IntelCm11ebi58w Firmware
before ebtgl357.0071
IntelCm11ebi716w Firmware
before ebtgl357.0071
IntelCm11ebc4w Firmware
before ebtgl357.0071
IntelElm12hbi3 Firmware
before hbadl357.0052
IntelElm12hbi5 Firmware
before hbadl357.0052
IntelElm12hbi7 Firmware
before hbadl357.0052

Weakness classification

References