6.7

CVE-2022-24382

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IntelLapbc510 Firmware Version < bctgl357.0065
   IntelLapbc510 Version-
IntelLapbc710 Firmware Version < bctgl357.0065
   IntelLapbc710 Version-
IntelLapkc71f Firmware Version < kctgl357.0040
   IntelLapkc71f Version-
IntelLapkc71e Firmware Version < kctgl357.0040
   IntelLapkc71e Version-
IntelLapkc51e Firmware Version < kctgl357.0040
   IntelLapkc51e Version-
IntelNuc11dbbi9 Firmware Version < dbtgl579.0055
   IntelNuc11dbbi9 Version-
IntelNuc11dbbi7 Firmware Version < dbtgl579.0055
   IntelNuc11dbbi7 Version-
IntelNuc11btmi7 Firmware Version < dbtgl579.0055
   IntelNuc11btmi7 Version-
IntelNuc11btmi9 Firmware Version < dbtgl579.0055
   IntelNuc11btmi9 Version-
IntelNuc11paq Firmware Version < patgl357.0042
   IntelNuc11paq Version-
IntelNuc11pah Firmware Version < patgl357.0042
   IntelNuc11pah Version-
IntelNuc11pa Firmware Version < patgl357.0042
   IntelNuc11pa Version-
IntelNuc 11 Pro Kit Nuc11tnhi50z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi70z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnki70z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnki30z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi30z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnki50z Firmware Version < tntgl357.0059
IntelNuc 11 Pro Board Nuc11tnbi3 Firmware Version < tntgl357.0059
IntelNuc 11 Pro Board Nuc11tnbi5 Firmware Version < tntgl357.0059
IntelNuc 11 Pro Board Nuc11tnbi7 Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi3 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnhi3 Version-
IntelNuc 11 Pro Kit Nuc11tnhi5 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnhi5 Version-
IntelNuc 11 Pro Kit Nuc11tnhi7 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnhi7 Version-
IntelNuc 11 Pro Kit Nuc11tnki3 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnki3 Version-
IntelNuc 11 Pro Kit Nuc11tnki5 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnki5 Version-
IntelNuc 11 Pro Kit Nuc11tnki7 Firmware Version < tntgl357.0059
   IntelNuc 11 Pro Kit Nuc11tnki7 Version-
IntelNuc 11 Pro Kit Nuc11tnhi30l Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi30p Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi50l Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi50w Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi70l Firmware Version < tntgl357.0059
IntelNuc 11 Pro Kit Nuc11tnhi70q Firmware Version < tntgl357.0059
IntelNuc 9 Pro Kit Nuc9v7qnx Firmware Version < qncflx70.0064
   IntelNuc 9 Pro Kit Nuc9v7qnx Version-
IntelNuc 9 Pro Kit Nuc9vxqnx Firmware Version < qncflx70.0064
   IntelNuc 9 Pro Kit Nuc9vxqnx Version-
IntelNuc9i5qn Firmware Version < qxcfl579.0064
   IntelNuc9i5qn Version-
IntelNuc9i7qn Firmware Version < qxcfl579.0064
   IntelNuc9i7qn Version-
IntelNuc9i9qn Firmware Version < qxcfl579.0064
   IntelNuc9i9qn Version-
IntelNuc8i3cysn Firmware Version < cycnli35.86a.0050
   IntelNuc8i3cysn Version-
IntelNuc8i3cysm Firmware Version < cycnli35.86a.0050
   IntelNuc8i3cysm Version-
IntelNuc Kit Nuc8i7be Firmware Version < becfl357.0089
   IntelNuc Kit Nuc8i7be Version-
IntelNuc Kit Nuc8i5be Firmware Version < becfl357.0089
   IntelNuc Kit Nuc8i5be Version-
IntelNuc Kit Nuc8i3b Firmware Version < becfl357.0089
   IntelNuc Kit Nuc8i3b Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.196
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.