PT-2022-3922 · Intel · Intel Nuc

Dmitry Frolov · Published 2022-05-10 · Updated 2022-05-23 · CVE-2022-21237

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel NUC (affected versions not specified)

Description The issue is related to improper buffer access in the firmware of some Intel NUC devices, which may allow a privileged user to potentially enable escalation of privilege via local access. This is caused by a buffer overflow in memory, where an operation exceeds the buffer boundaries. Exploitation of this issue can allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-04746

CVE-2022-21237

Affected Products

Intel Nuc

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21237 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21237 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04746 · Security Note