NetSight
high7.5

CVE-2022-36789

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may al…

Impact

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelNuc 10 Performance Kit Nuc10i7fnhn Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i5fnkn Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i5fnhn Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i7fnkn Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i3fnhn Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i3fnkn Firmware
before fncml357.0053
IntelNuc 10 Performance Mini Pc Nuc10i5fnhja Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i3fnhf Firmware
before fncml357.0053
IntelNuc 10 Performance Mini Pc Nuc10i5fnhca Firmware
before fncml357.0053
IntelNuc 10 Performance Mini Pc Nuc10i3fnhfa Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i5fnhj Firmware
before fncml357.0053
IntelNuc 10 Performance Kit Nuc10i7fnhc Firmware
before fncml357.0053

Weakness classification

References