CVE-2022-34147
High
Description
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability—
ProductIntel Lapqc71a Firmware
PublishedMay 10, 2023
First seenMay 10, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel lapqc71a_firmwareqccfl357.0158 or later
- intel lapqc71b_firmwareqccfl357.0158 or later
- intel lapqc71c_firmwareqccfl357.0158 or later
- intel lapqc71d_firmwareqccfl357.0158 or later
- intel nuc10i3fnh_firmwarefncml357.0059 or later
- intel nuc10i3fnhf_firmwarefncml357.0059 or later
- intel nuc10i3fnhfa_firmwarefncml357.0059 or later
- intel nuc10i3fnhja_firmwarefncml357.0059 or later
- intel nuc10i3fnhn_firmwarefncml357.0059 or later
- intel nuc10i3fnk_firmwarefncml357.0059 or later
- intel nuc10i3fnkn_firmwarefncml357.0059 or later
- intel nuc10i5fnh_firmwarefncml357.0059 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel lapqc71a_firmware | v < qccfl357.0158 | qccfl357.0158 |
| intel lapqc71b_firmware | v < qccfl357.0158 | qccfl357.0158 |
| intel lapqc71c_firmware | v < qccfl357.0158 | qccfl357.0158 |
| intel lapqc71d_firmware | v < qccfl357.0158 | qccfl357.0158 |
| intel nuc10i3fnh_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnhf_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnhfa_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnhja_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnhn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnk_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i3fnkn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnh_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnhca_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnhf_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnhja_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnhj_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnhn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnk_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnkn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnkpa_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i5fnkp_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnh_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnhaa_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnhc_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnhja_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnhn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnk_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnkn_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnkp_firmware | v < fncml357.0059 | fncml357.0059 |
| intel nuc10i7fnkpa_firmware | v < fncml357.0059 | fncml357.0059 |
| intel cm8i3cb4n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8i5cb8n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8i7cb8n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8ccb4r_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8pcb4r_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel nuc8i3pnb_firmware | v < pnwhl357.0050 | pnwhl357.0050 |
| intel nuc8i3pnh_firmware | v < pnwhl357.0050 | pnwhl357.0050 |
| intel nuc8i3pnk_firmware | v < pnwhl357.0050 | pnwhl357.0050 |
| intel nuc9i5qn_firmware | v < qxcfl579.0071 | qxcfl579.0071 |
| intel nuc9i7qn_firmware | v < qxcfl579.0071 | qxcfl579.0071 |
| intel nuc9i9qn_firmware | v < qxcfl579.0071 | qxcfl579.0071 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.