PT-2023-13082 · Intel · Intel Nuc Kit

Published 2023-05-10 · Updated 2023-06-01 · CVE-2022-32577

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) NUC Kits versions prior to PY0081

Description The issue is related to improper input validation in BIOS Firmware, which may allow a privileged user to potentially enable information disclosure or denial of service via local access.

Recommendations For versions prior to PY0081, update the BIOS Firmware to version PY0081 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-32577

Affected Products

Intel Nuc Kit

References · 4

• https://osv.dev/vulnerability/CVE-2022-32577 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32577 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html · Vendor Advisory
• https://t.me/cibsecurity/63787 · Telegram Post