CVE-2022-36349

EPSS 0.07%
Published 11.11.2022 16:15:15
Last modified 21.11.2024 07:12:50
Source secure@intel.com
Teams watchlist Login
Open Login

Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Nuc Board Nuc5i3mybe Firmware Version < myi30060

Intel ≫ Nuc Board Nuc5i3mybe Version-

Intel ≫ Nuc Kit Nuc5i3myhe Firmware Version < myi30060

Intel ≫ Nuc Kit Nuc5i3myhe Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.214

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
secure@intel.com	5.2	2	2.7	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

CWE-1188 Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-36349

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-36349

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-36349

EUVD