PT-2022-23323 · Intel · Intel Nuc Boards+1

Published 2022-11-11 · Updated 2024-02-09 · CVE-2022-36349

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) NUC Boards and Intel(R) NUC Kits versions prior to MYi30060

Description The issue is related to insecure default variable initialization in BIOS firmware, which may allow an authenticated user to potentially enable denial of service via local access.

Recommendations For versions prior to MYi30060, update the BIOS firmware to version MYi30060 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2022-36349

Affected Products

Intel Nuc Boards

Intel Nuc Kit

References · 3

• https://osv.dev/vulnerability/CVE-2022-36349 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36349 · Security Note