CVE-2022-36789

CVSS 7.5 HIGHEPSS 0.2%CWE-284

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 nov 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Productos afectados

n/a · Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs

Referencias

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html