CVE-2022-37327

Medium

Description

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

SeverityMedium
CVSS6.1
Exploit probability—
ProductIntel Nuc10i3fnh Firmware
PublishedMay 10, 2023
First seenMay 10, 2023

How to fix

Update
  • intel nuc10i3fnh_firmwarefncml357.0059 or later
  • intel nuc10i3fnhf_firmwarefncml357.0059 or later
  • intel nuc10i3fnhfa_firmwarefncml357.0059 or later
  • intel nuc10i3fnhja_firmwarefncml357.0059 or later
  • intel nuc10i3fnhn_firmwarefncml357.0059 or later
  • intel nuc10i3fnk_firmwarefncml357.0059 or later
  • intel nuc10i3fnkn_firmwarefncml357.0059 or later
  • intel nuc10i5fnh_firmwarefncml357.0059 or later
  • intel nuc10i5fnhca_firmwarefncml357.0059 or later
  • intel nuc10i5fnhf_firmwarefncml357.0059 or later
  • intel nuc10i5fnhja_firmwarefncml357.0059 or later
  • intel nuc10i5fnhj_firmwarefncml357.0059 or later

Affected products

ProductAffected versionsFixed in
intel nuc10i3fnh_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnhf_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnhfa_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnhja_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnhn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnk_firmwarev < fncml357.0059fncml357.0059
intel nuc10i3fnkn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnh_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnhca_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnhf_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnhja_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnhj_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnhn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnk_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnkn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnkpa_firmwarev < fncml357.0059fncml357.0059
intel nuc10i5fnkp_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnh_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnhaa_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnhc_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnhja_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnhn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnk_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnkn_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnkp_firmwarev < fncml357.0059fncml357.0059
intel nuc10i7fnkpa_firmwarev < fncml357.0059fncml357.0059
intel cm8i3cb4n_firmwarev < cbwhl357.0101cbwhl357.0101
intel cm8i5cb8n_firmwarev < cbwhl357.0101cbwhl357.0101
intel cm8i7cb8n_firmwarev < cbwhl357.0101cbwhl357.0101
intel cm8ccb4r_firmwarev < cbwhl357.0101cbwhl357.0101
intel cm8pcb4r_firmwarev < cbwhl357.0101cbwhl357.0101
intel nuc8i3pnb_firmwarev < pnwhl357.0050pnwhl357.0050
intel nuc8i3pnh_firmwarev < pnwhl357.0050pnwhl357.0050
intel nuc8i3pnk_firmwarev < pnwhl357.0050pnwhl357.0050
intel cm11ebi38w_firmwarev < ebtgl357.0071ebtgl357.0071
intel cm11ebi58w_firmwarev < ebtgl357.0071ebtgl357.0071
intel cm11ebi716w_firmwarev < ebtgl357.0071ebtgl357.0071
intel cm11ebc4w_firmwarev < ebtgl357.0071ebtgl357.0071
intel elm12hbi3_firmwarev < hbadl357.0052hbadl357.0052
intel elm12hbi5_firmwarev < hbadl357.0052hbadl357.0052
intel elm12hbi7_firmwarev < hbadl357.0052hbadl357.0052
intel elm12hbc_firmwarev < hbadl357.0052hbadl357.0052
intel nuc12dcmi7_firmwarev < edadl579.0056edadl579.0056
intel nuc12edbi7_firmwarev < edadl579.0056edadl579.0056
intel nuc12dcmi9_firmwarev < edadl579.0056edadl579.0056
intel nuc12edbi9_firmwarev < edadl579.0056edadl579.0056
intel nuc12wsbi3_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wsbi30z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi3_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi30l_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi30z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski3_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski30z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wsbi5_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wsbi50z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi5_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi50z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski5_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski50z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wsbi70z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi7_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wshi70z_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski7_firmwarev < wsadl357.0086wsadl357.0086
intel nuc12wski70z_firmwarev < wsadl357.0086wsadl357.0086
intel lapac71h_firmwarev < acadl357.0059acadl357.0059
intel lapac71g_firmwarev < acadl357.0059acadl357.0059
intel nuc12snki72_firmwarev < snadl357.0056snadl357.0056
intel nuc12snki72va_firmwarev < snadl357.0056snadl357.0056
intel nuc11atbc4_firmwarev < atjslcpx.0038atjslcpx.0038
intel nuc11atkc2_firmwarev < atjslcpx.0038atjslcpx.0038
intel nuc11atkc4_firmwarev < atjslcpx.0038atjslcpx.0038
intel nuc11atkpe_firmwarev < atjslcpx.0038atjslcpx.0038
intel lapbc510_firmwarev < bctgl357.0078bctgl357.0078
intel lapbc710_firmwarev < bctgl357.0078bctgl357.0078
intel lapkc51e_firmwarev < kctgl357.0044kctgl357.0044
intel lapkc71e_firmwarev < kctgl357.0044kctgl357.0044
intel lapkc71f_firmwarev < kctgl357.0044kctgl357.0044
intel nuc11btmi7_firmwarev < dbtgl579.0065dbtgl579.0065
intel nuc11dbbi7_firmwarev < dbtgl579.0065dbtgl579.0065
intel nuc11btmi9_firmwarev < dbtgl579.0065dbtgl579.0065
intel nuc11dbbi9_firmwarev < dbtgl579.0065dbtgl579.0065
intel nuc11tnbi3_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnbi30z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi3_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi30l_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi30p_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi30z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki3_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki30z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnbi5_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnbi50z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi5_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi50l_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi50w_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi50z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki5_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki50z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnbi7_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnbi70z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi7_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi70l_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi70q_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnhi70z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki7_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11tnki70z_firmwarev < tntgl357.0070tntgl357.0070
intel nuc11phki7c_firmwarev < phtgl579.0071phtgl579.0071
intel nuc11phki7caa_firmwarev < phtgl579.0071phtgl579.0071
intel nuc9v7qnb_firmwarev < qncflx70.0071qncflx70.0071
intel nuc9v7qnx_firmwarev < qncflx70.0071qncflx70.0071
intel nuc9vxqnb_firmwarev < qncflx70.0071qncflx70.0071
intel nuc9vxqnx_firmwarev < qncflx70.0071qncflx70.0071
intel nuc8cchb_firmwarev < chaplcel.0061chaplcel.0061
intel nuc8cchbn_firmwarev < chaplcel.0061chaplcel.0061
intel nuc8cchkrn_firmwareNo range specified—
intel nuc8cchkr_firmwarev < chaplcel.0061chaplcel.0061
intel laprc510_firmwarev < rcadl357.0060rcadl357.0060
intel laprc710_firmwarev < rcadl357.0060rcadl357.0060

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-37327 · Intel Nuc10i3fnh Firmware · Dark Radar