Vulnerability in Intel Nuc 11 Pro Board Nuc11tnbi30z
CVE-2022-37334
Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.
Vulnerability class: Dirty Pipe (CVE-2022-0847)
EPSS: 0.002 (5.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Intel Nuc_11_pro_board_nuc11tnbi30z
- Intel Nuc_11_pro_board_nuc11tnbi30z_firmware
- Intel Nuc_11_pro_board_nuc11tnbi50z
- Intel Nuc_11_pro_board_nuc11tnbi50z_firmware
- Intel Nuc_11_pro_board_nuc11tnbi70z
- Intel Nuc_11_pro_board_nuc11tnbi70z_firmware
- Intel Nuc_11_pro_kit_nuc11tnhi3
- Intel Nuc_11_pro_kit_nuc11tnhi30z
- Intel Nuc_11_pro_kit_nuc11tnhi30z_firmware
- Intel Nuc_11_pro_kit_nuc11tnhi3_firmware
Weakness classification (CWE)
References
- secure@intel.com (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-37334?
- CVE-2022-37334 is a high-severity vulnerability in Intel Nuc 11 Pro Board Nuc11tnbi30z, classified under Improper Initialization. CVSS score: 7.8/10. Published 2022-11-11.
- How severe is CVE-2022-37334?
- High severity. CVSS v3 base score is 7.8 out of 10.