6.7

CVE-2022-28699

Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc8cchb Firmware Version -
   Intel ≫ Nuc8cchb Version -
Intel ≫ Nuc8cchbn Firmware Version -
   Intel ≫ Nuc8cchbn Version -
Intel ≫ Nuc8cchkrn Firmware Version -
   Intel ≫ Nuc8cchkrn Version -
Intel ≫ Nuc8cchkr Firmware Version -
   Intel ≫ Nuc8cchkr Version -
Intel ≫ Nuc8i7hnkqc Firmware Version -
   Intel ≫ Nuc8i7hnkqc Version -
Intel ≫ Nuc8i7hvkva Firmware Version -
   Intel ≫ Nuc8i7hvkva Version -
Intel ≫ Nuc8i7hvkvaw Firmware Version -
   Intel ≫ Nuc8i7hvkvaw Version -
Intel ≫ Nuc8i7hvk Firmware Version -
   Intel ≫ Nuc8i7hvk Version -
Intel ≫ Nuc8i7hnk Firmware Version -
   Intel ≫ Nuc8i7hnk Version -
Intel ≫ Stk2mv64cc Firmware Version -
   Intel ≫ Stk2mv64cc Version -
Intel ≫ Nuc7cjysamn Firmware Version -
   Intel ≫ Nuc7cjysamn Version -
Intel ≫ Nuc7cjysal Firmware Version -
   Intel ≫ Nuc7cjysal Version -
Intel ≫ Nuc7cjyhn Firmware Version -
   Intel ≫ Nuc7cjyhn Version -
Intel ≫ Nuc7pjyhn Firmware Version -
   Intel ≫ Nuc7pjyhn Version -
Intel ≫ Nuc7pjyh Firmware Version -
   Intel ≫ Nuc7pjyh Version -
Intel ≫ Nuc7cjyh Firmware Version -
   Intel ≫ Nuc7cjyh Version -
Intel ≫ Nuc8i3cysn Firmware Version -
   Intel ≫ Nuc8i3cysn Version -
Intel ≫ Nuc8i7inh Firmware Version -
   Intel ≫ Nuc8i7inh Version -
Intel ≫ Nuc8i5inh Firmware Version -
   Intel ≫ Nuc8i5inh Version -
Intel ≫ Nuc8i7inh Firmware Version -
   Intel ≫ Nuc8i7inh Version -
Intel ≫ Nuc8i5inh Firmware Version -
   Intel ≫ Nuc8i5inh Version -
Intel ≫ Nuc7cjysamn Firmware Version -
   Intel ≫ Nuc7cjysamn Version -
Intel ≫ Nuc7cjysal Firmware Version -
   Intel ≫ Nuc7cjysal Version -
Intel ≫ Nuc7cjyhn Firmware Version -
   Intel ≫ Nuc7cjyhn Version -
Intel ≫ Nuc7pjyhn Firmware Version -
   Intel ≫ Nuc7pjyhn Version -
Intel ≫ Nuc7pjyh Firmware Version -
   Intel ≫ Nuc7pjyh Version -
Intel ≫ Nuc7cjyh Firmware Version -
   Intel ≫ Nuc7cjyh Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Intel 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
Patch
Vendor Advisory