CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-33176
Medium (6.7) in intel. EPSS 0.2% chance of exploitation in the next 30 days.
Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:nuc_11_performance_kit_nuc11pahi30z_firmware
- intel:nuc_11_performance_kit_nuc11pahi3_firmware
- intel:nuc_11_performance_kit_nuc11pahi50z_firmware
- intel:nuc_11_performance_kit_nuc11pahi5_firmware
- intel:nuc_11_performance_kit_nuc11pahi70z_firmware
- intel:nuc_11_performance_kit_nuc11pahi7_firmware
- intel:nuc_11_performance_kit_nuc11paki3_firmware
- intel:nuc_11_performance_kit_nuc11paki5_firmware
- intel:nuc_11_performance_kit_nuc11paki7_firmware
- intel:nuc_11_performance_mini_pc_nuc11paqi50wa_firmware
- intel:nuc_11_performance_mini_pc_nuc11paqi70qa_firmware