CVE-2022-36789
High
Description
Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability—
ProductIntel Nuc 10 Performance Kit Nuc10i7fnhn Firmware
PublishedNov 11, 2022
First seenNov 11, 2022
Weakness typeCWE-284Improper access control
How to fix
Update
- intel nuc_10_performance_kit_nuc10i7fnhn_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i5fnkn_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i5fnhn_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i7fnkn_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i3fnhn_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i3fnkn_firmwarefncml357.0053 or later
- intel nuc_10_performance_mini_pc_nuc10i5fnhja_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i3fnhf_firmwarefncml357.0053 or later
- intel nuc_10_performance_mini_pc_nuc10i5fnhca_firmwarefncml357.0053 or later
- intel nuc_10_performance_mini_pc_nuc10i3fnhfa_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i5fnhj_firmwarefncml357.0053 or later
- intel nuc_10_performance_kit_nuc10i7fnhc_firmwarefncml357.0053 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_10_performance_kit_nuc10i7fnhn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnkn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnhn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i7fnkn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i3fnhn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i3fnkn_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i5fnhja_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i3fnhf_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i5fnhca_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i3fnhfa_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnhj_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i7fnhc_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i7fnhja_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i3fnhja_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i3fnk_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i7fnhaa_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnh_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnk_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i7fnh_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnhf_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i7fnkpa_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_mini_pc_nuc10i5fnkpa_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i3fnh_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i7fnk_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i7fnkp_firmware | v < fncml357.0053 | fncml357.0053 |
| intel nuc_10_performance_kit_nuc10i5fnkp_firmware | v < fncml357.0053 | fncml357.0053 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.