Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-34147

Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 82 products from intel, from intel, from intel and 79 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-05-10T14:15:12.977

Last Modified

2024-11-21T07:08:56.750

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel lapqc71a_firmware < qccfl357.0158 Yes
Hardware intel lapqc71a - No
Operating System intel lapqc71b_firmware < qccfl357.0158 Yes
Hardware intel lapqc71b - No
Operating System intel lapqc71c_firmware < qccfl357.0158 Yes
Hardware intel lapqc71c - No
Operating System intel lapqc71d_firmware < qccfl357.0158 Yes
Hardware intel lapqc71d - No
Operating System intel nuc10i3fnh_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnh - No
Operating System intel nuc10i3fnhf_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnhf - No
Operating System intel nuc10i3fnhfa_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnhfa - No
Operating System intel nuc10i3fnhja_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnhja - No
Operating System intel nuc10i3fnhn_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnhn - No
Operating System intel nuc10i3fnk_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnk - No
Operating System intel nuc10i3fnkn_firmware < fncml357.0059 Yes
Hardware intel nuc10i3fnkn - No
Operating System intel nuc10i5fnh_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnh - No
Operating System intel nuc10i5fnhca_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnhca - No
Operating System intel nuc10i5fnhf_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnhf - No
Operating System intel nuc10i5fnhja_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnhja - No
Operating System intel nuc10i5fnhj_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnhj - No
Operating System intel nuc10i5fnhn_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnhn - No
Operating System intel nuc10i5fnk_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnk - No
Operating System intel nuc10i5fnkn_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnkn - No
Operating System intel nuc10i5fnkpa_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnkpa - No
Operating System intel nuc10i5fnkp_firmware < fncml357.0059 Yes
Hardware intel nuc10i5fnkp - No
Operating System intel nuc10i7fnh_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnh - No
Operating System intel nuc10i7fnhaa_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnhaa - No
Operating System intel nuc10i7fnhc_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnhc - No
Operating System intel nuc10i7fnhja_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnhja - No
Operating System intel nuc10i7fnhn_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnhn - No
Operating System intel nuc10i7fnk_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnk - No
Operating System intel nuc10i7fnkn_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnkn - No
Operating System intel nuc10i7fnkp_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnkp - No
Operating System intel nuc10i7fnkpa_firmware < fncml357.0059 Yes
Hardware intel nuc10i7fnkpa - No
Operating System intel cm8i3cb4n_firmware < cbwhl357.0101 Yes
Hardware intel cm8i3cb4n - No
Operating System intel cm8i5cb8n_firmware < cbwhl357.0101 Yes
Hardware intel cm8i5cb8n - No
Operating System intel cm8i7cb8n_firmware < cbwhl357.0101 Yes
Hardware intel cm8i7cb8n - No
Operating System intel cm8ccb4r_firmware < cbwhl357.0101 Yes
Hardware intel cm8ccb4r - No
Operating System intel cm8pcb4r_firmware < cbwhl357.0101 Yes
Hardware intel cm8pcb4r - No
Operating System intel nuc8i3pnb_firmware < pnwhl357.0050 Yes
Hardware intel nuc8i3pnb - No
Operating System intel nuc8i3pnh_firmware < pnwhl357.0050 Yes
Hardware intel nuc8i3pnh - No
Operating System intel nuc8i3pnk_firmware < pnwhl357.0050 Yes
Hardware intel nuc8i3pnk - No
Operating System intel nuc9i5qn_firmware < qxcfl579.0071 Yes
Hardware intel nuc9i5qn - No
Operating System intel nuc9i7qn_firmware < qxcfl579.0071 Yes
Hardware intel nuc9i7qn - No
Operating System intel nuc9i9qn_firmware < qxcfl579.0071 Yes
Hardware intel nuc9i9qn - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.