What is CVE-2022-37327?

CVE-2022-37327 is a medium-severity vulnerability in Intel Cm11ebc4w, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2023-05-10.

How severe is CVE-2022-37327?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Improper input validation in Intel Cm11ebc4w

CVE-2022-37327

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (7.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N.

Affected products

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-37327?: CVE-2022-37327 is a medium-severity vulnerability in Intel Cm11ebc4w, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2023-05-10.
How severe is CVE-2022-37327?: Medium severity. CVSS v3 base score is 6.1 out of 10.