Privilege Escalation in Intel HDMI Firmware Update Tool for NUC
CVE-2022-40971
6.7MEDIUM
Key Information:
- Vendor
Intel
- Vendor
- CVE Published:
- 10 May 2023
What is CVE-2022-40971?
The Intel HDMI Firmware Update Tool for NUC prior to version 1.79.1.1 has been found to have incorrect default permissions that could be exploited by an authenticated user to escalate privileges through local access. This issue underscores the importance of keeping firmware up to date and ensuring that security permissions are correctly configured to prevent unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved