High severity · published Nov 11, 2022
CVE-2022-37334
Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N1
Nuc 11 Pro Board Nuc11tnbi30z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Board Nuc11tnbi50z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Board Nuc11tnbi70z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnhi3 Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnhi30z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnhi5 Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnhi50z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnhi70z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnki30z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnki50z Firmware · Intel
before tntgl357.0064 · source: NVD
N1
Nuc 11 Pro Kit Nuc11tnki70z Firmware · Intel
before tntgl357.0064 · source: NVD
Affected product
N1
Nuc 11 Pro Board Nuc11tnbi30z Firmware
Intel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37334
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
More from Nuc 11 Pro Board Nuc11tnbi30z Firmware
6.7
CVE-2023-29494
Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2022-24382
Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2022-24297
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVE-2022-21237
Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access
4.4
CVE-2023-40540
Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local…