CVE-2022-33176
High
Description
Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS8.2
Exploit probability—
ProductIntel Nuc 11 Performance Kit Nuc11pahi30z Firmware
PublishedNov 11, 2022
First seenNov 11, 2022
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel nuc_11_performance_kit_nuc11pahi30z_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11pahi50z_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11pahi70z_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11pahi3_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11pahi5_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11pahi7_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11paki3_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11paki5_firmwarepatgl357.0042 or later
- intel nuc_11_performance_kit_nuc11paki7_firmwarepatgl357.0042 or later
- intel nuc_11_performance_mini_pc_nuc11paqi50wa_firmwarepatgl357.0042 or later
- intel nuc_11_performance_mini_pc_nuc11paqi70qa_firmwarepatgl357.0042 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_11_performance_kit_nuc11pahi30z_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11pahi50z_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11pahi70z_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11pahi3_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11pahi5_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11pahi7_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11paki3_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11paki5_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_kit_nuc11paki7_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_mini_pc_nuc11paqi50wa_firmware | v < patgl357.0042 | patgl357.0042 |
| intel nuc_11_performance_mini_pc_nuc11paqi70qa_firmware | v < patgl357.0042 | patgl357.0042 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.