CVE-2022-31477

MEDIUM

4.0

Description

Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Details CVE

Score CVSS v3.14.0

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Vecteur d'attaqueLOCAL

ComplexiteHIGH

Privileges requisHIGH

Interaction utilisateurREQUIRED

Publie5/10/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

intel:cm11ebc4wintel:cm11ebc4w_firmwareintel:cm11ebi38wintel:cm11ebi38w_firmwareintel:cm11ebi58wintel:cm11ebi58w_firmwareintel:cm11ebi716wintel:cm11ebi716w_firmwareintel:lapbc510intel:lapbc510_firmwareintel:lapbc710intel:lapbc710_firmwareintel:lapkc51eintel:lapkc51e_firmwareintel:lapkc71eintel:lapkc71e_firmwareintel:lapkc71fintel:lapkc71f_firmwareintel:nuc11btmi7intel:nuc11btmi7_firmwareintel:nuc11btmi9intel:nuc11btmi9_firmwareintel:nuc11dbbi7intel:nuc11dbbi7_firmwareintel:nuc11dbbi9intel:nuc11dbbi9_firmwareintel:nuc11pahi3intel:nuc11pahi30zintel:nuc11pahi30z_firmwareintel:nuc11pahi3_firmwareintel:nuc11pahi5intel:nuc11pahi50zintel:nuc11pahi50z_firmwareintel:nuc11pahi5_firmwareintel:nuc11pahi7intel:nuc11pahi70zintel:nuc11pahi70z_firmwareintel:nuc11pahi7_firmwareintel:nuc11paki3intel:nuc11paki3_firmwareintel:nuc11paki5intel:nuc11paki5_firmwareintel:nuc11paki7intel:nuc11paki7_firmwareintel:nuc11paqi50waintel:nuc11paqi50wa_firmwareintel:nuc11paqi70qaintel:nuc11paqi70qa_firmwareintel:nuc11phki7cintel:nuc11phki7c_firmwareintel:nuc11phki7caaintel:nuc11phki7caa_firmwareintel:nuc11tnbv5intel:nuc11tnbv5_firmwareintel:nuc11tnbv7intel:nuc11tnbv7_firmwareintel:nuc11tnhv5intel:nuc11tnhv50lintel:nuc11tnhv50l_firmwareintel:nuc11tnhv5_firmwareintel:nuc11tnhv7intel:nuc11tnhv70lintel:nuc11tnhv70l_firmwareintel:nuc11tnhv7_firmwareintel:nuc11tnkv5intel:nuc11tnkv50zintel:nuc11tnkv50z_firmwareintel:nuc11tnkv5_firmwareintel:nuc11tnkv7intel:nuc11tnkv7_firmware

Faiblesses (CWE)

CWE-665CWE-665

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.