Nuc8I3Cysm Firmware
CVE-2022-24297
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
AnalysisAI
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.
Technical ContextAI
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Lapbc510 Firmware, Intel Lapbc710 Firmware, Intel Lapkc71F Firmware, Intel Lapkc71E Firmware, Intel Lapkc51E Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Nuc8I3Cysm Firmware
View allImproper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation
Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escal
Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio
Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o
Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of priv
Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privile
Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation o
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today