Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-24382

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.7, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 118 products from intel, from intel, from intel and 115 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2022, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2022-05-12T17:15:10.267

Last Modified

2025-05-05T17:18:00.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-20
Type: Secondary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	intel	lapbc510_firmware	< bctgl357.0065	Yes
Hardware	intel	lapbc510	-	No
Operating System	intel	lapbc710_firmware	< bctgl357.0065	Yes
Hardware	intel	lapbc710	-	No
Operating System	intel	lapkc71f_firmware	< kctgl357.0040	Yes
Hardware	intel	lapkc71f	-	No
Operating System	intel	lapkc71e_firmware	< kctgl357.0040	Yes
Hardware	intel	lapkc71e	-	No
Operating System	intel	lapkc51e_firmware	< kctgl357.0040	Yes
Hardware	intel	lapkc51e	-	No
Operating System	intel	nuc11dbbi9_firmware	< dbtgl579.0055	Yes
Hardware	intel	nuc11dbbi9	-	No
Operating System	intel	nuc11dbbi7_firmware	< dbtgl579.0055	Yes
Hardware	intel	nuc11dbbi7	-	No
Operating System	intel	nuc11btmi7_firmware	< dbtgl579.0055	Yes
Hardware	intel	nuc11btmi7	-	No
Operating System	intel	nuc11btmi9_firmware	< dbtgl579.0055	Yes
Hardware	intel	nuc11btmi9	-	No
Operating System	intel	nuc_11_compute_element_cm11ebc4w_firmware	< ebtgl357.0057	Yes
Hardware	intel	nuc_11_compute_element_cm11ebc4w	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi38w_firmware	< ebtgl357.0057	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi38w	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi58w_firmware	< ebtgl357.0057	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi58w	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi716w_firmware	< ebtgl357.0057	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi716w	-	No
Operating System	intel	nuc11paq_firmware	< patgl357.0042	Yes
Hardware	intel	nuc11paq	-	No
Operating System	intel	nuc11pah_firmware	< patgl357.0042	Yes
Hardware	intel	nuc11pah	-	No
Operating System	intel	nuc11pa_firmware	< patgl357.0042	Yes
Hardware	intel	nuc11pa	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi30z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi30z	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi50z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi50z	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi70z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi70z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi50z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi50z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi70z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi70z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki70z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki70z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki30z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki30z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi30z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi30z	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki50z_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki50z	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi3_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi3	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi5_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi5	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi7_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi7	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi3_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi3	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi5_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi5	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi7_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi7	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki3_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki3	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki5_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki5	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki7_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki7	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi30l_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi30l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi30p_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi30p	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi50l_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi50l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi50w_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi50w	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi70l_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi70l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi70q_firmware	< tntgl357.0059	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi70q	-	No
Operating System	intel	nuc_11_enthusiast_kit_nuc11phki7c_firmware	< phtgl579.0064	Yes
Hardware	intel	nuc_11_enthusiast_kit_nuc11phki7c	-	No
Operating System	intel	nuc_11_enthusiast_mini_pc_nuc11phki7caa_firmware	< phtgl579.0064	Yes
Hardware	intel	nuc_11_enthusiast_mini_pc_nuc11phki7caa	-	No
Operating System	intel	nuc_9_pro_compute_element_nuc9v7qnb_firmware	< qncflx70.0064	Yes
Hardware	intel	nuc_9_pro_compute_element_nuc9v7qnb	-	No
Operating System	intel	nuc_9_pro_compute_element_nuc9vxqnb_firmware	< qncflx70.0064	Yes
Hardware	intel	nuc_9_pro_compute_element_nuc9vxqnb	-	No
Operating System	intel	nuc_9_pro_kit_nuc9v7qnx_firmware	< qncflx70.0064	Yes
Hardware	intel	nuc_9_pro_kit_nuc9v7qnx	-	No
Operating System	intel	nuc_9_pro_kit_nuc9vxqnx_firmware	< qncflx70.0064	Yes
Hardware	intel	nuc_9_pro_kit_nuc9vxqnx	-	No
Operating System	intel	nuc9i5qn_firmware	< qxcfl579.0064	Yes
Hardware	intel	nuc9i5qn	-	No
Operating System	intel	nuc9i7qn_firmware	< qxcfl579.0064	Yes
Hardware	intel	nuc9i7qn	-	No
Operating System	intel	nuc9i9qn_firmware	< qxcfl579.0064	Yes
Hardware	intel	nuc9i9qn	-	No
Operating System	intel	nuc8i3cysn_firmware	< cycnli35.86a.0050	Yes
Hardware	intel	nuc8i3cysn	-	No
Operating System	intel	nuc8i3cysm_firmware	< cycnli35.86a.0050	Yes
Hardware	intel	nuc8i3cysm	-	No
Operating System	intel	nuc_8_compute_element_cm8ccb_firmware	< cbwhl.0095	Yes
Hardware	intel	nuc_8_compute_element_cm8ccb	-	No
Operating System	intel	nuc_8_compute_element_cm8i3cb_firmware	< cbwhl.0095	Yes
Hardware	intel	nuc_8_compute_element_cm8i3cb	-	No
Operating System	intel	nuc_8_compute_element_cm8i5cb_firmware	< cbwhl.0095	Yes
Hardware	intel	nuc_8_compute_element_cm8i5cb	-	No
Operating System	intel	nuc_8_compute_element_cm8i7cb_firmware	< cbwhl.0095	Yes
Hardware	intel	nuc_8_compute_element_cm8i7cb	-	No
Operating System	intel	nuc_8_compute_element_cm8pcb_firmware	< cbwhl.0095	Yes
Hardware	intel	nuc_8_compute_element_cm8pcb	-	No
Operating System	intel	nuc_kit_nuc8i7be_firmware	< becfl357.0089	Yes
Hardware	intel	nuc_kit_nuc8i7be	-	No
Operating System	intel	nuc_kit_nuc8i5be_firmware	< becfl357.0089	Yes
Hardware	intel	nuc_kit_nuc8i5be	-	No
Operating System	intel	nuc_kit_nuc8i3b_firmware	< becfl357.0089	Yes
Hardware	intel	nuc_kit_nuc8i3b	-	No

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html Patch, Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.