Skip to main content

Lapbc510 Firmware CVE-2022-24297

MEDIUM
2022-05-12 secure@intel.com
Privilege Escalation Intel Lapbc510 Firmware Lapbc710 Firmware Lapkc71F Firmware Lapkc71E Firmware Lapkc51E Firmware Nuc11Dbbi9 Firmware Nuc11Dbbi7 Firmware Nuc11Btmi7 Firmware Nuc11Btmi9 Firmware Nuc 11 Compute Element Cm11Ebc4W Firmware Nuc 11 Compute Element Cm11Ebi38W Firmware Nuc 11 Compute Element Cm11Ebi58W Firmware Nuc 11 Compute Element Cm11Ebi716W Firmware Nuc11Paq Firmware Nuc11Pah Firmware Nuc11Pa Firmware Nuc 11 Pro Board Nuc11Tnbi30Z Firmware Nuc 11 Pro Board Nuc11Tnbi50Z Firmware Nuc 11 Pro Board Nuc11Tnbi70Z Firmware Nuc 11 Pro Kit Nuc11Tnhi50Z Firmware Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware Nuc 11 Pro Kit Nuc11Tnki70Z Firmware Nuc 11 Pro Kit Nuc11Tnki30Z Firmware Nuc 11 Pro Kit Nuc11Tnhi30Z Firmware Nuc 11 Pro Kit Nuc11Tnki50Z Firmware Nuc 11 Pro Board Nuc11Tnbi3 Firmware Nuc 11 Pro Board Nuc11Tnbi5 Firmware Nuc 11 Pro Board Nuc11Tnbi7 Firmware Nuc 11 Pro Kit Nuc11Tnhi3 Firmware Nuc 11 Pro Kit Nuc11Tnhi5 Firmware Nuc 11 Pro Kit Nuc11Tnhi7 Firmware Nuc 11 Pro Kit Nuc11Tnki3 Firmware Nuc 11 Pro Kit Nuc11Tnki5 Firmware Nuc 11 Pro Kit Nuc11Tnki7 Firmware Nuc 11 Pro Kit Nuc11Tnhi30L Firmware Nuc 11 Pro Kit Nuc11Tnhi30P Firmware Nuc 11 Pro Kit Nuc11Tnhi50L Firmware Nuc 11 Pro Kit Nuc11Tnhi50W Firmware Nuc 11 Pro Kit Nuc11Tnhi70L Firmware Nuc 11 Pro Kit Nuc11Tnhi70Q Firmware Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware Nuc 9 Pro Compute Element Nuc9V7Qnb Firmware Nuc 9 Pro Compute Element Nuc9Vxqnb Firmware Nuc 9 Pro Kit Nuc9V7Qnx Firmware Nuc 9 Pro Kit Nuc9Vxqnx Firmware Nuc9I5Qn Firmware Nuc9I7Qn Firmware Nuc9I9Qn Firmware Nuc8I3Cysn Firmware Nuc8I3Cysm Firmware Nuc 8 Compute Element Cm8Ccb Firmware Nuc 8 Compute Element Cm8I3Cb Firmware Nuc 8 Compute Element Cm8I5Cb Firmware Nuc 8 Compute Element Cm8I7Cb Firmware Nuc 8 Compute Element Cm8Pcb Firmware Nuc Kit Nuc8I7Be Firmware Nuc Kit Nuc8I5Be Firmware Nuc Kit Nuc8I3B Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2022 - 17:15 nvd
MEDIUM 6.7

DescriptionNVD

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Technical ContextAI

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Lapbc510 Firmware, Intel Lapbc710 Firmware, Intel Lapkc71F Firmware, Intel Lapkc71E Firmware, Intel Lapkc51E Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2022-34488 HIGH
7.8 Aug 18

Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile

CVE-2022-33209 HIGH
7.8 Aug 18

Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged

CVE-2022-28858 HIGH
7.8 Aug 18

Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileg

CVE-2022-27493 HIGH
7.8 Aug 18

Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u

CVE-2021-0058 HIGH
7.8 Jun 09

Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may all

CVE-2021-0057 HIGH
7.8 Jun 09

Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an

CVE-2021-0056 HIGH
7.8 Jun 09

Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may a

CVE-2022-32579 HIGH
7.2 Aug 18

Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u

CVE-2022-24382 MEDIUM
6.7 May 12

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio

CVE-2022-21237 MEDIUM
6.7 May 12

Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o

CVE-2022-34345 MEDIUM
6.2 Aug 18

Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged

Share

CVE-2022-24297 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy