What is CVE-2022-26024?

CVE-2022-26024 is a medium-severity vulnerability in Intel Nuc7i3dnbe, classified under Improper Preservation of Permissions. CVSS score: 6.7/10. Published 2022-11-11.

How severe is CVE-2022-26024?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Nuc7i3dnbe

CVE-2022-26024

Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.001 (3.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Nuc7i3dnbe
Intel Nuc7i3dnbe_firmware
Intel Nuc7i3dnhe
Intel Nuc7i3dnhe_firmware
Intel Nuc7i3dnhnc
Intel Nuc7i3dnhnc_firmware
Intel Nuc7i3dnke
Intel Nuc7i3dnke_firmware
Intel Nuc7i3dnktc
Intel Nuc7i3dnktc_firmware

Weakness classification (CWE)

CWE-281 — Improper Preservation of Permissions

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-26024?: CVE-2022-26024 is a medium-severity vulnerability in Intel Nuc7i3dnbe, classified under Improper Preservation of Permissions. CVSS score: 6.7/10. Published 2022-11-11.
How severe is CVE-2022-26024?: Medium severity. CVSS v3 base score is 6.7 out of 10.