Skip to main content

Nuc 8 Compute Element Cm8I7Cb Firmware CVE-2022-35276

MEDIUM
Improper Access Control (CWE-284)
2022-11-11 secure@intel.com
Intel Authentication Bypass Privilege Escalation Nuc 8 Compute Element Cm8I7Cb Firmware Nuc 8 Compute Element Cm8I3Cb Firmware Nuc 8 Compute Element Cm8Ccb Firmware Nuc 8 Compute Element Cm8I5Cb Firmware Nuc 8 Compute Element Cm8Pcb Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 11, 2022 - 16:15 nvd
MEDIUM 6.7

DescriptionNVD

Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Nuc 8 Compute Element Cm8I7Cb Firmware, Intel Nuc 8 Compute Element Cm8I3Cb Firmware, Intel Nuc 8 Compute Element Cm8Ccb Firmware, Intel Nuc 8 Compute Element Cm8I5Cb Firmware, Intel Nuc 8 Compute Element Cm8Pcb Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nuc 8 Compute Element Cm8I7Cb Firmware

View all
CVE-2022-24382 MEDIUM
6.7 May 12

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio
CVE-2022-24297 MEDIUM
6.7 May 12

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala
CVE-2022-21237 MEDIUM
6.7 May 12

Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o
CVE-2021-0067 MEDIUM
6.7 Jun 09

 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enabl
CVE-2021-0054 MEDIUM
6.7 Jun 09

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable
CVE-2021-33086 MEDIUM
5.5 Nov 17

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of s

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2022-35276 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy