7.8

CVE-2022-34147

Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Lapqc71a Firmware Version < qccfl357.0158
   Intel ≫ Lapqc71a Version-
Intel ≫ Lapqc71b Firmware Version < qccfl357.0158
   Intel ≫ Lapqc71b Version-
Intel ≫ Lapqc71c Firmware Version < qccfl357.0158
   Intel ≫ Lapqc71c Version-
Intel ≫ Lapqc71d Firmware Version < qccfl357.0158
   Intel ≫ Lapqc71d Version-
Intel ≫ Nuc10i3fnh Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnh Version-
Intel ≫ Nuc10i3fnhf Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnhf Version-
Intel ≫ Nuc10i3fnhfa Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnhfa Version-
Intel ≫ Nuc10i3fnhja Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnhja Version-
Intel ≫ Nuc10i3fnhn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnhn Version-
Intel ≫ Nuc10i3fnk Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnk Version-
Intel ≫ Nuc10i3fnkn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i3fnkn Version-
Intel ≫ Nuc10i5fnh Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnh Version-
Intel ≫ Nuc10i5fnhca Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnhca Version-
Intel ≫ Nuc10i5fnhf Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnhf Version-
Intel ≫ Nuc10i5fnhja Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnhja Version-
Intel ≫ Nuc10i5fnhj Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnhj Version-
Intel ≫ Nuc10i5fnhn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnhn Version-
Intel ≫ Nuc10i5fnk Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnk Version-
Intel ≫ Nuc10i5fnkn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnkn Version-
Intel ≫ Nuc10i5fnkpa Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnkpa Version-
Intel ≫ Nuc10i5fnkp Firmware Version < fncml357.0059
   Intel ≫ Nuc10i5fnkp Version-
Intel ≫ Nuc10i7fnh Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnh Version-
Intel ≫ Nuc10i7fnhaa Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnhaa Version-
Intel ≫ Nuc10i7fnhc Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnhc Version-
Intel ≫ Nuc10i7fnhja Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnhja Version-
Intel ≫ Nuc10i7fnhn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnhn Version-
Intel ≫ Nuc10i7fnk Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnk Version-
Intel ≫ Nuc10i7fnkn Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnkn Version-
Intel ≫ Nuc10i7fnkp Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnkp Version-
Intel ≫ Nuc10i7fnkpa Firmware Version < fncml357.0059
   Intel ≫ Nuc10i7fnkpa Version-
Intel ≫ Cm8i3cb4n Firmware Version < cbwhl357.0101
   Intel ≫ Cm8i3cb4n Version-
Intel ≫ Cm8i5cb8n Firmware Version < cbwhl357.0101
   Intel ≫ Cm8i5cb8n Version-
Intel ≫ Cm8i7cb8n Firmware Version < cbwhl357.0101
   Intel ≫ Cm8i7cb8n Version-
Intel ≫ Cm8ccb4r Firmware Version < cbwhl357.0101
   Intel ≫ Cm8ccb4r Version-
Intel ≫ Cm8pcb4r Firmware Version < cbwhl357.0101
   Intel ≫ Cm8pcb4r Version-
Intel ≫ Nuc8i3pnb Firmware Version < pnwhl357.0050
   Intel ≫ Nuc8i3pnb Version-
Intel ≫ Nuc8i3pnh Firmware Version < pnwhl357.0050
   Intel ≫ Nuc8i3pnh Version-
Intel ≫ Nuc8i3pnk Firmware Version < pnwhl357.0050
   Intel ≫ Nuc8i3pnk Version-
Intel ≫ Nuc9i5qn Firmware Version < qxcfl579.0071
   Intel ≫ Nuc9i5qn Version-
Intel ≫ Nuc9i7qn Firmware Version < qxcfl579.0071
   Intel ≫ Nuc9i7qn Version-
Intel ≫ Nuc9i9qn Firmware Version < qxcfl579.0071
   Intel ≫ Nuc9i9qn Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.