CVE-2022-32577
Low
Description
Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access
SeverityLow
CVSS3.4
Exploit probability—
ProductIntel Nuc5cpyh Firmware
PublishedMay 10, 2023
First seenMay 10, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel nuc5cpyh_firmwarepy0081 or later
- intel nuc5pgyh_firmwarepy0081 or later
- intel nuc5ppyh_firmwarepy0081 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc5cpyh_firmware | v < py0081 | py0081 |
| intel nuc5pgyh_firmware | v < py0081 | py0081 |
| intel nuc5ppyh_firmware | v < py0081 | py0081 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.