CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-21794
Medium (6.7) in intel. EPSS 0.2% chance of exploitation in the next 30 days.
Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:nuc_8_business_nuc8i7hnkqc_firmware
- intel:nuc_8_enthusiast_nuc8i7hvkva_firmware
- intel:nuc_8_enthusiast_nuc8i7hvkvaw_firmware
- intel:nuc_kit_nuc8i7hnk_firmware
- intel:nuc_kit_nuc8i7hvk_firmware