What is CVE-2022-27229?

CVE-2022-27229 is a medium-severity vulnerability in Intel Hdmi_firmware, classified under CWE-249. CVSS score: 6.7/10. Published 2023-11-14.

How severe is CVE-2022-27229?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Path Traversal in Intel Hdmi_firmware

CVE-2022-27229

Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Hdmi_firmware
Intel Nuc_7_business_nuc7i3dnhnc
Intel Nuc_7_business_nuc7i3dnktc
Intel Nuc_7_business_nuc7i5dnkpc
Intel Nuc_7_business_nuc7i5dnkpu
Intel Nuc_kit_nuc7i3dnhe
Intel Nuc_kit_nuc7i3dnke
Intel Nuc_kit_nuc7i5dnhe
Intel Nuc_kit_nuc7i5dnke
Intel Nuc_kit_nuc7i7dnhe

Weakness classification (CWE)

CWE-249
CWE-22 — Path Traversal

References

secure@intel.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-27229?: CVE-2022-27229 is a medium-severity vulnerability in Intel Hdmi_firmware, classified under CWE-249. CVSS score: 6.7/10. Published 2023-11-14.
How severe is CVE-2022-27229?: Medium severity. CVSS v3 base score is 6.7 out of 10.