Skip to main content

Nuc 11 Performance Kit Nuc11Pahi30Z Firmware CVE-2022-33176

MEDIUM
Improper Input Validation (CWE-20)
2022-11-11 secure@intel.com
Intel Privilege Escalation Nuc 11 Performance Kit Nuc11Pahi30Z Firmware Nuc 11 Performance Kit Nuc11Pahi50Z Firmware Nuc 11 Performance Kit Nuc11Pahi70Z Firmware Nuc 11 Performance Kit Nuc11Pahi3 Firmware Nuc 11 Performance Kit Nuc11Pahi5 Firmware Nuc 11 Performance Kit Nuc11Pahi7 Firmware Nuc 11 Performance Kit Nuc11Paki3 Firmware Nuc 11 Performance Kit Nuc11Paki5 Firmware Nuc 11 Performance Kit Nuc11Paki7 Firmware Nuc 11 Performance Mini Pc Nuc11Paqi50Wa Firmware Nuc 11 Performance Mini Pc Nuc11Paqi70Qa Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 11, 2022 - 16:15 nvd
MEDIUM 6.7

DescriptionNVD

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Nuc 11 Performance Kit Nuc11Pahi30Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi50Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi70Z Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi3 Firmware, Intel Nuc 11 Performance Kit Nuc11Pahi5 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc 11 Performance Kit Nuc11Pahi30Z Firmware

View all
CVE-2023-22312 HIGH
7.8 May 10

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation
CVE-2023-22449 MEDIUM
6.7 Aug 11

Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalatio
CVE-2023-34349 MEDIUM
6.4 Aug 11

Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privil
CVE-2023-40540 MEDIUM
4.4 Nov 14

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t
CVE-2023-29500 MEDIUM
4.4 Aug 11

Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege
CVE-2023-22444 MEDIUM
4.4 Aug 11

Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Pe
CVE-2023-22356 MEDIUM
4.4 Aug 11

Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information
CVE-2023-22330 MEDIUM
4.4 Aug 11

Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable infor

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2022-33176 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy