CVE-2022-31477

Medium

Description

Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

SeverityMedium
CVSS4.0
Exploit probability—
ProductIntel Nuc11pahi3 Firmware
PublishedMay 10, 2023
First seenMay 10, 2023
Weakness typeCWE-665CWE-665

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
intel nuc11pahi3_firmwareNo range specified—
intel nuc11pahi30z_firmwareNo range specified—
intel nuc11paki3_firmwareNo range specified—
intel nuc11pahi5_firmwareNo range specified—
intel nuc11pahi50z_firmwareNo range specified—
intel nuc11paki5_firmwareNo range specified—
intel nuc11paqi50wa_firmwareNo range specified—
intel nuc11pahi7_firmwareNo range specified—
intel nuc11pahi70z_firmwareNo range specified—
intel nuc11paki7_firmwareNo range specified—
intel nuc11paqi70qa_firmwareNo range specified—
intel cm11ebi38w_firmwareNo range specified—
intel cm11ebi58w_firmwareNo range specified—
intel cm11ebi716w_firmwareNo range specified—
intel cm11ebc4w_firmwareNo range specified—
intel lapbc510_firmwareNo range specified—
intel lapbc710_firmwareNo range specified—
intel lapkc51e_firmwareNo range specified—
intel lapkc71e_firmwareNo range specified—
intel lapkc71f_firmwareNo range specified—
intel nuc11btmi7_firmwareNo range specified—
intel nuc11dbbi7_firmwareNo range specified—
intel nuc11btmi9_firmwareNo range specified—
intel nuc11dbbi9_firmwareNo range specified—
intel nuc11phki7c_firmwareNo range specified—
intel nuc11phki7caa_firmwareNo range specified—
intel nuc11tnkv50z_firmwareNo range specified—
intel nuc11tnhv70l_firmwareNo range specified—
intel nuc11tnhv50l_firmwareNo range specified—
intel nuc11tnkv5_firmwareNo range specified—
intel nuc11tnkv7_firmwareNo range specified—
intel nuc11tnhv5_firmwareNo range specified—
intel nuc11tnhv7_firmwareNo range specified—
intel nuc11tnbv7_firmwareNo range specified—
intel nuc11tnbv5_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.