NetSight
high7.5

CVE-2022-38099

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially en…

Impact

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelNuc 11 Compute Element Cm11ebi38w Firmware
before ebtgl357.0065
IntelNuc 11 Compute Element Cm11ebc4w Firmware
before ebtgl357.0065
IntelNuc 11 Compute Element Cm11ebi58w Firmware
before ebtgl357.0065
IntelNuc 11 Compute Element Cm11ebv58w Firmware
before ebtgl357.0065
IntelNuc 11 Compute Element Cm11ebi716w Firmware
before ebtgl357.0065
IntelNuc 11 Compute Element Cm11ebv716w Firmware
before ebtgl357.0065
IntelNuc11dbbi9 Firmware
before ebtgl357.0065
IntelNuc11dbbi7 Firmware
before ebtgl357.0065

Weakness classification

References