Input validation error in Intel products - CVE-2022-37336

Vulnerability identifier: #VU79573

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-37336

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in BIOS firmware. A local user can execute arbitrary code with elevated privileges.

Intel NUC 10 Performance Mini PC NUC10i7FNHJA
Intel NUC 10 Performance kit NUC10i5FNKP
Intel NUC 10 Performance kit NUC10i7FNKP
Intel NUC 10 Performance kit NUC10i7FNK
Intel NUC 10 Performance kit NUC10i3FNH
Intel NUC 10 Performance Mini PC NUC10i5FNKPA
Intel NUC 10 Performance kit NUC10i5FNHF
Intel NUC 10 Performance kit NUC10i7FNH
Intel NUC 10 Performance kit NUC10i5FNK
Intel NUC 10 Performance kit NUC10i5FNH
Intel NUC 10 Performance Mini PC NUC10i7FNHAA
Intel NUC 10 Performance kit NUC10i3FNK
Intel NUC 10 Performance Mini PC NUC10i3FNHJA
Intel NUC 10 Performance kit NUC10i7FNHN
Intel NUC 10 Performance kit NUC10i7FNHC
Intel NUC 10 Performance kit NUC10i5FNHJ
Intel NUC 10 Performance Mini PC NUC10i3FNHFA
Intel NUC 10 Performance Mini PC NUC10i5FNHCA
Intel NUC 10 Performance Mini PC NUC10i7FNKPA
Intel NUC 10 Performance kit NUC10i3FNHF
Intel NUC 10 Performance Mini PC NUC10i5FNHJA
Intel NUC 10 Performance kit NUC10i3FNKN
Intel NUC 10 Performance kit NUC10i3FNHN
Intel NUC 10 Performance kit NUC10i7FNKN
Intel NUC 10 Performance kit NUC10i5FNHN
Intel NUC 10 Performance kit NUC10i5FNKN

Install updates from vendor's website.

Intel NUC 10 Performance Mini PC NUC10i7FNHJA - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNKP - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNKP - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNK - update to FNCML357
Intel NUC 10 Performance kit NUC10i3FNH - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i5FNKPA - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNHF - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNH - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNK - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNH - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i7FNHAA - update to FNCML357
Intel NUC 10 Performance kit NUC10i3FNK - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i3FNHJA - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNHN - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNHC - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNHJ - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i3FNHFA - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i5FNHCA - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i7FNKPA - update to FNCML357
Intel NUC 10 Performance kit NUC10i3FNHF - update to FNCML357
Intel NUC 10 Performance Mini PC NUC10i5FNHJA - update to FNCML357
Intel NUC 10 Performance kit NUC10i3FNKN - update to FNCML357
Intel NUC 10 Performance kit NUC10i3FNHN - update to FNCML357
Intel NUC 10 Performance kit NUC10i7FNKN - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNHN - update to FNCML357
Intel NUC 10 Performance kit NUC10i5FNKN - update to FNCML357

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html

• Multiple vulnerabilities in Intel NUC Kit and Mini PC BIOS firmware