CVE Feed

    Dashboard / CVE / CVE-2022-37334

    CVE-2022-37334

    Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Nov 11, 2022
    Last Modified:Feb 5, 2025
    EPS:Nov 11, 2022
    EPSS Score:0.00136
    CVSS Score:7

    Affected Products

    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi30z
    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi30z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi50z
    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi50z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi70z
    Vendor
    Intel
    Product
    Nuc 11 Pro Board Nuc11tnbi70z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi3
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi30z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi30z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi3 Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi5
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi50z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi50z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi5 Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi70z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnhi70z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki30z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki30z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki50z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki50z Firmware
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki70z
    Vendor
    Intel
    Product
    Nuc 11 Pro Kit Nuc11tnki70z Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-665 Improper Initialization

    Related CVEs

    CVE-2023-40540 (CVSS 4.1) — Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile…
    CVE-2023-22444 (CVSS 6) — Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R)…
    CVE-2023-27887 (CVSS 6.1) — Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially ena…
    CVE-2023-29494 (CVSS 7.5) — Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially e…
    CVE-2022-32582 (CVSS 5.3) — Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NU…
    CVE-2022-21237 (CVSS 6.7) — Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable es…
    CVE-2022-24297 (CVSS 6.7) — Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially ena…
    CVE-2022-24382 (CVSS 6.7) — Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High