Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-37336

Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.9, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 52 products from intel, from intel, from intel and 49 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-08-11T03:15:13.423

Last Modified

2024-11-21T07:14:46.933

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.9 (HIGH)

Weaknesses

Type: Secondary
CWE-20
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	intel	nuc_10_performance_kit_nuc10i7fnhn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnhn	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnkn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnkn	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnhn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnhn	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnkn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnkn	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnhn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnhn	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnkn_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnkn	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnhja_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnhja	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnhf_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnhf	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnkpa_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnkpa	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnhca_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnhca	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i3fnhfa_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i3fnhfa	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnhj_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnhj	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnhc_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnhc	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnhja_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnhja	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i3fnhja_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i3fnhja	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnk_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnk	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnhaa_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnhaa	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnh_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnk_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnk	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnh_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnhf_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnhf	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnkpa_firmware	-	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnkpa	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnh_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnk_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnk	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnkp_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnkp	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnkp_firmware	-	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnkp	-	No

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html Vendor Advisory ([email protected])
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.