Threat Investigation
Request a demo

CVE-2022-26024

Medium

Description

Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Nuc7i3dnbe Firmware
PublishedNov 11, 2022
First seenNov 11, 2022
Weakness typeCWE-281CWE-281

How to fix

Update
  • intel nuc7i3dnbe_firmware1.78.2.0.7 or later
  • intel nuc7i3dnhe_firmware1.78.2.0.7 or later
  • intel nuc7i3dnhnc_firmware1.78.2.0.7 or later
  • intel nuc7i3dnke_firmware1.78.2.0.7 or later
  • intel nuc7i3dnktc_firmware1.78.2.0.7 or later
  • intel nuc7i5dnbe_firmware1.78.2.0.7 or later
  • intel nuc7i5dnhe_firmware1.78.2.0.7 or later
  • intel nuc7i5dnke_firmware1.78.2.0.7 or later
  • intel nuc7i7dnbe_firmware1.78.2.0.7 or later
  • intel nuc7i7dnhe_firmware1.78.2.0.7 or later
  • intel nuc7i7dnke_firmware1.78.2.0.7 or later

Affected products

ProductAffected versionsFixed in
intel nuc7i3dnbe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i3dnhe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i3dnhnc_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i3dnke_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i3dnktc_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i5dnbe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i5dnhe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i5dnke_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i7dnbe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i7dnhe_firmwarev < 1.78.2.0.71.78.2.0.7
intel nuc7i7dnke_firmwarev < 1.78.2.0.71.78.2.0.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-26024 · Intel Nuc7i3dnbe Firmware · Dark Radar