7.8

CVE-2022-37334

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IntelNuc 11 Pro Kit Nuc11tnhi70z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnki70z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnki30z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnhi30z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnki50z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnhi50z Firmware Version < tntgl357.0064
IntelNuc 11 Pro Kit Nuc11tnhi3 Firmware Version < tntgl357.0064
   IntelNuc 11 Pro Kit Nuc11tnhi3 Version-
IntelNuc 11 Pro Kit Nuc11tnhi5 Firmware Version < tntgl357.0064
   IntelNuc 11 Pro Kit Nuc11tnhi5 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.342
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com 7.8 1.1 6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.