CVE Feed

    Dashboard / CVE / CVE-2022-32569

    CVE-2022-32569

    Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access.

    Published:Nov 11, 2022
    Last Modified:Feb 5, 2025
    EPS:Nov 11, 2022
    EPSS Score:0.00063
    CVSS Score:7.5

    Affected Products

    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc510
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc510 Firmware
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc710
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc710 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-25561 (CVSS 5.4) — Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 ma…
    CVE-2023-40540 (CVSS 4.1) — Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile…
    CVE-2023-22444 (CVSS 6) — Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R)…
    CVE-2023-22312 (CVSS 7.2) — Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable …
    CVE-2022-40261 (CVSS 8.2) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40250 (CVSS 8.8) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40246 (CVSS 7.2) — A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resu…
    CVE-2022-26873 (CVSS 8.2) — A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent b…
    CVE-2021-33086 (CVSS 5.5) — Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable d…
    CVE-2021-33087 (CVSS 5.5) — Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack bef…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High