Medium severity · published May 10, 2023
CVE-2022-32582
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow…
4.4
CVSS
0.2%
EPSS
No
On KEV
Description
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N1
Nuc 11 Performance Kit Nuc11pahi3 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11pahi30z Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11pahi5 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11pahi50z Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11pahi7 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11pahi70z Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11paki3 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11paki5 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Kit Nuc11paki7 Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Mini PC Nuc11paqi50wa Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Performance Mini PC Nuc11paqi70qa Firmware · Intel
before patgl357.0050 · source: NVD
N1
Nuc 11 Pro Board Nuc11tnbi3 Firmware · Intel
before tntgl357.0070 · source: NVD
Affected product
N1
Nuc 11 Performance Kit Nuc11pahi3 Firmware
Intel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32582
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32582
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
More from Nuc 11 Performance Kit Nuc11pahi3 Firmware
7.8
CVE-2023-22312
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2023-22449
Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2022-33176
Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged…
6.7
CVE-2021-0067
Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2021-0054
Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access