CVE-2022-24297
Medium
Description
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Lapbc510 Firmware
PublishedMay 12, 2022
First seenMay 12, 2022
How to fix
Update
- intel lapbc510_firmwarebctgl357.0065 or later
- intel lapbc710_firmwarebctgl357.0065 or later
- intel lapkc71f_firmwarekctgl357.0040 or later
- intel lapkc71e_firmwarekctgl357.0040 or later
- intel lapkc51e_firmwarekctgl357.0040 or later
- intel nuc11dbbi9_firmwaredbtgl579.0055 or later
- intel nuc11dbbi7_firmwaredbtgl579.0055 or later
- intel nuc11btmi7_firmwaredbtgl579.0055 or later
- intel nuc11btmi9_firmwaredbtgl579.0055 or later
- intel nuc_11_compute_element_cm11ebc4w_firmwareebtgl357.0057 or later
- intel nuc_11_compute_element_cm11ebi38w_firmwareebtgl357.0057 or later
- intel nuc_11_compute_element_cm11ebi58w_firmwareebtgl357.0057 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel lapbc510_firmware | v < bctgl357.0065 | bctgl357.0065 |
| intel lapbc710_firmware | v < bctgl357.0065 | bctgl357.0065 |
| intel lapkc71f_firmware | v < kctgl357.0040 | kctgl357.0040 |
| intel lapkc71e_firmware | v < kctgl357.0040 | kctgl357.0040 |
| intel lapkc51e_firmware | v < kctgl357.0040 | kctgl357.0040 |
| intel nuc11dbbi9_firmware | v < dbtgl579.0055 | dbtgl579.0055 |
| intel nuc11dbbi7_firmware | v < dbtgl579.0055 | dbtgl579.0055 |
| intel nuc11btmi7_firmware | v < dbtgl579.0055 | dbtgl579.0055 |
| intel nuc11btmi9_firmware | v < dbtgl579.0055 | dbtgl579.0055 |
| intel nuc_11_compute_element_cm11ebc4w_firmware | v < ebtgl357.0057 | ebtgl357.0057 |
| intel nuc_11_compute_element_cm11ebi38w_firmware | v < ebtgl357.0057 | ebtgl357.0057 |
| intel nuc_11_compute_element_cm11ebi58w_firmware | v < ebtgl357.0057 | ebtgl357.0057 |
| intel nuc_11_compute_element_cm11ebi716w_firmware | v < ebtgl357.0057 | ebtgl357.0057 |
| intel nuc11paq_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc11pah_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc11pa_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_pro_board_nuc11tnbi30z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_board_nuc11tnbi50z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_board_nuc11tnbi70z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi50z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi70z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki70z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki30z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi30z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki50z_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_board_nuc11tnbi3_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_board_nuc11tnbi5_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_board_nuc11tnbi7_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi3_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi5_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi7_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki3_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki5_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnki7_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi30l_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi30p_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi50l_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi50w_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi70l_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_pro_kit_nuc11tnhi70q_firmware | v < tntgl357.0059 | tntgl357.0059 |
| intel nuc_11_enthusiast_kit_nuc11phki7c_firmware | v < phtgl579.0064 | phtgl579.0064 |
| intel nuc_11_enthusiast_mini_pc_nuc11phki7caa_firmware | v < phtgl579.0064 | phtgl579.0064 |
| intel nuc_9_pro_compute_element_nuc9v7qnb_firmware | v < qncflx70.0064 | qncflx70.0064 |
| intel nuc_9_pro_compute_element_nuc9vxqnb_firmware | v < qncflx70.0064 | qncflx70.0064 |
| intel nuc_9_pro_kit_nuc9v7qnx_firmware | v < qncflx70.0064 | qncflx70.0064 |
| intel nuc_9_pro_kit_nuc9vxqnx_firmware | v < qncflx70.0064 | qncflx70.0064 |
| intel nuc9i5qn_firmware | v < qxcfl579.0064 | qxcfl579.0064 |
| intel nuc9i7qn_firmware | v < qxcfl579.0064 | qxcfl579.0064 |
| intel nuc9i9qn_firmware | v < qxcfl579.0064 | qxcfl579.0064 |
| intel nuc8i3cysn_firmware | v < cycnli35.86a.0050 | cycnli35.86a.0050 |
| intel nuc8i3cysm_firmware | v < cycnli35.86a.0050 | cycnli35.86a.0050 |
| intel nuc_8_compute_element_cm8ccb_firmware | v < cbwhl.0095 | cbwhl.0095 |
| intel nuc_8_compute_element_cm8i3cb_firmware | v < cbwhl.0095 | cbwhl.0095 |
| intel nuc_8_compute_element_cm8i5cb_firmware | v < cbwhl.0095 | cbwhl.0095 |
| intel nuc_8_compute_element_cm8i7cb_firmware | v < cbwhl.0095 | cbwhl.0095 |
| intel nuc_8_compute_element_cm8pcb_firmware | v < cbwhl.0095 | cbwhl.0095 |
| intel nuc_kit_nuc8i7be_firmware | v < becfl357.0089 | becfl357.0089 |
| intel nuc_kit_nuc8i5be_firmware | v < becfl357.0089 | becfl357.0089 |
| intel nuc_kit_nuc8i3b_firmware | v < becfl357.0089 | becfl357.0089 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.