CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-36372
Medium (6.7) in intel. EPSS 0.2% chance of exploitation in the next 30 days.
Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-92
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:nuc_8_compute_element_cm8ccb4r_firmware
- intel:nuc_8_compute_element_cm8i3cb4n_firmware
- intel:nuc_8_compute_element_cm8i5cb8n_firmware
- intel:nuc_8_compute_element_cm8i7cb8n_firmware
- intel:nuc_8_compute_element_cm8pcb4r_firmware
- intel:nuc_business_nuc8i7hnk_firmware
- intel:nuc_business_nuc8i7hnkqc_firmware
- intel:nuc_business_nuc8i7hvk_firmware
- intel:nuc_business_nuc8i7hvkva_firmware
- intel:nuc_business_nuc8i7hvkvaw_firmware
- intel:nuc_enthusiast_nuc8i7hnk_firmware
- intel:nuc_enthusiast_nuc8i7hnkqc_firmware
- intel:nuc_enthusiast_nuc8i7hvk_firmware
- intel:nuc_enthusiast_nuc8i7hvkva_firmware
- intel:nuc_enthusiast_nuc8i7hvkvaw_firmware
- intel:nuc_kit_nuc8i7hnk_firmware
- intel:nuc_kit_nuc8i7hnkqc_firmware
- intel:nuc_kit_nuc8i7hvk_firmware
- intel:nuc_kit_nuc8i7hvkva_firmware
- intel:nuc_kit_nuc8i7hvkvaw_firmware
- intel:nuc_pro_board_nuc8i3pnb_firmware
- intel:nuc_pro_board_nuc8i3pnh_firmware
- intel:nuc_pro_board_nuc8i3pnk_firmware
- intel:nuc_pro_compute_element_nuc9v7qnb_firmware
- intel:nuc_pro_compute_element_nuc9v7qnx_firmware
- intel:nuc_pro_compute_element_nuc9vxqnb_firmware
- intel:nuc_pro_compute_element_nuc9vxqnx_firmware
- intel:nuc_pro_kit_nuc8i3pnb_firmware
- intel:nuc_pro_kit_nuc8i3pnh_firmware
- intel:nuc_pro_kit_nuc8i3pnk_firmware
- intel:nuc_rugged_kit_nuc8cchb_firmware
- intel:nuc_rugged_kit_nuc8cchbn_firmware
- intel:nuc_rugged_kit_nuc8cchkr_firmware
- intel:nuc_rugged_kit_nuc8cchkrn_firmware