NetSight
medium6.1

CVE-2022-37327

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, In…

Impact

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

Affected products

VendorProductAffected versions
IntelNuc10i3fnh Firmware
before fncml357.0059
IntelNuc10i3fnhf Firmware
before fncml357.0059
IntelNuc10i3fnhfa Firmware
before fncml357.0059
IntelNuc10i3fnhja Firmware
before fncml357.0059
IntelNuc10i3fnhn Firmware
before fncml357.0059
IntelNuc10i3fnk Firmware
before fncml357.0059
IntelNuc10i3fnkn Firmware
before fncml357.0059
IntelNuc10i5fnh Firmware
before fncml357.0059
IntelNuc10i5fnhca Firmware
before fncml357.0059
IntelNuc10i5fnhf Firmware
before fncml357.0059
IntelNuc10i5fnhja Firmware
before fncml357.0059
IntelNuc10i5fnhj Firmware
before fncml357.0059

Weakness classification

References