CVE-2022-36339
High
Description
Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability8. percentile0.2%
ProductIntel Cm8i3cb4n Firmware
PublishedMay 10, 2023
First seenMay 10, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel cm8i3cb4n_firmwarecbwhl357.0101 or later
- intel cm8i5cb8n_firmwarecbwhl357.0101 or later
- intel cm8i7cb8n_firmwarecbwhl357.0101 or later
- intel cm8ccb4r_firmwarecbwhl357.0101 or later
- intel cm8pcb4r_firmwarecbwhl357.0101 or later
- intel cm11ebi38w_firmwareebtgl357.0071 or later
- intel cm11ebi58w_firmwareebtgl357.0071 or later
- intel cm11ebi716w_firmwareebtgl357.0071 or later
- intel cm11ebc4w_firmwareebtgl357.0071 or later
- intel elm12hbi3_firmwarehbadl357.0052 or later
- intel elm12hbi5_firmwarehbadl357.0052 or later
- intel elm12hbi7_firmwarehbadl357.0052 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel cm8i3cb4n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8i5cb8n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8i7cb8n_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8ccb4r_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm8pcb4r_firmware | v < cbwhl357.0101 | cbwhl357.0101 |
| intel cm11ebi38w_firmware | v < ebtgl357.0071 | ebtgl357.0071 |
| intel cm11ebi58w_firmware | v < ebtgl357.0071 | ebtgl357.0071 |
| intel cm11ebi716w_firmware | v < ebtgl357.0071 | ebtgl357.0071 |
| intel cm11ebc4w_firmware | v < ebtgl357.0071 | ebtgl357.0071 |
| intel elm12hbi3_firmware | v < hbadl357.0052 | hbadl357.0052 |
| intel elm12hbi5_firmware | v < hbadl357.0052 | hbadl357.0052 |
| intel elm12hbi7_firmware | v < hbadl357.0052 | hbadl357.0052 |
| intel elm12hbc_firmware | v < hbadl357.0052 | hbadl357.0052 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.