NetSight
high7.8

CVE-2022-37345

Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation …

Impact

Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelNuc Kit Nuc5i3ryh Firmware
before ry0386
IntelNuc Kit Nuc5i7ryh Firmware
before ry0386
IntelNuc Kit Nuc5i5ryk Firmware
before ry0386
IntelNuc Kit Nuc5i5ryh Firmware
before ry0386
IntelNuc Kit Nuc5i3ryk Firmware
before ry0386
IntelNuc Kit Nuc5i5ryhs Firmware
before ry0386
IntelNuc Kit Nuc5i3ryhs Firmware
before ry0386
IntelNuc Kit Nuc5i3ryhsn Firmware
before ry0386

Weakness classification

References