MEDIUM✓ PATCH🇬🇧 English

CVE-2022-27229

CVSS 6.7v3.1pub. 2023-11-14upd. 2024-11-21

Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Intel Hdmi Firmware

    OS
    Intel
    < 1.79.1.1

  • Intel Nuc 7 Business Nuc7i3dnhnc

    HW
    Intel
    wszystkie wersje

  • Intel Nuc 7 Business Nuc7i3dnktc

    HW
    Intel
    wszystkie wersje

  • Intel Nuc 7 Business Nuc7i5dnkpc

    HW
    Intel
    wszystkie wersje

  • Intel Nuc 7 Business Nuc7i5dnkpu

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i3dnhe

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i3dnke

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i5dnhe

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i5dnke

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i7dnhe

    HW
    Intel
    wszystkie wersje

  • Intel Nuc Kit Nuc7i7dnke

    HW
    Intel
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2020-0530HIGH7.8ten sam produkt

Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enabl...

CVE-2019-11094HIGH7.8ten sam produkt

Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to pote...

CVE-2018-12176HIGH8.2ten sam produkt

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute ar...

CVE-2023-32658MEDIUM6.7ten sam produkt

Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software...

CVE-2023-22356MEDIUM6.0ten sam produkt

Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable i...