7.8
CVE-2022-37345
- EPSS 0.11%
- Published 11.11.2022 16:15:16
- Last modified 05.02.2025 21:15:19
- Source secure@intel.com
- Teams watchlist Login
- Open Login
Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.
Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Nuc Kit Nuc5i3ryh Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i7ryh Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i5ryk Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i5ryh Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i3ryk Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i5ryhs Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i3ryhs Firmware Version < ry0386
Intel ≫ Nuc Kit Nuc5i3ryhsn Firmware Version < ry0386
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.11% | 0.293 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| secure@intel.com | 7.8 | 1.1 | 6 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.