Skip to content
OpenAdvisories
High WID-SEC-2022-1987 18 CVEs

Intel NUC Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Nov 8, 2022 · Updated Dec 16, 2024 · Revision 3 · de-DE

Vendor: Dell Vendor: Intel Vendor: Lenovo Product: Computer Product: Firmware Product: PowerScale OneFS

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel NUC Firmware ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.

Product

Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.

Vulnerabilities 18

  • High 8.2
    CVE-2021-33164

    Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged use…

  • High 8.2
    CVE-2022-33176

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mi…

  • High 7.8
    CVE-2022-37345

    Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticate…

  • High 7.7
    CVE-2022-21794

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, …

  • High 7.7
    CVE-2022-34152

    Improper input validation in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Kits before version TY0070 may al…

  • High 7.5
    CVE-2022-26124

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugge…

  • High 7.5
    CVE-2022-32569

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may al…

  • High 7.5
    CVE-2022-35276

    Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allo…

  • High 7.5
    CVE-2022-36370

    Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may…

  • High 7.5
    CVE-2022-36789

    Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini…

  • High 7.5
    CVE-2022-38099

    Improper input validation in BIOS firmware for some Intel(R) NUC 11 Compute Elements before version EBTGL357.0065 may a…

  • High 7.0
    CVE-2022-37334

    Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before versio…

  • Medium 6.7
    CVE-2022-26024

    Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before versio…

  • Medium 6.7
    CVE-2022-36377

    Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & M…

  • Medium 6.7
    CVE-2022-36380

    Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 be…

    Windows
  • Medium 6.7
    CVE-2022-36384

    Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before…

    Windows
  • Medium 6.7
    CVE-2022-36400

    Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before versi…

    Windows
  • Medium 5.2
    CVE-2022-36349

    Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before ver…

Revision history

  1. #3

    Neue Updates von Dell aufgenommen

  2. #2

    Neue Updates von LENOVO aufgenommen

  3. #1

    Initiale Fassung

References