Improper Authentication Vulnerability in Intel NUC Boards and Kits
CVE-2022-36370

7.8HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Nuc Boards And Intel(r) Nuc Kits
Vendor
CVE Published:
11 November 2022

Summary

A security vulnerability discovered in the BIOS firmware of certain Intel NUC Boards and Kits allows a privileged local user to exploit improper authentication mechanisms. This could potentially lead to escalation of privileges, enabling unauthorized access and control over the system. Users are advised to update their firmware to the latest version, MYi30060 or later, to mitigate the risks associated with this vulnerability.

Affected Version(s)

Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.