CVE-2022-32766 : Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation o

Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Published 2023-05-10 14:15:12

Updated 2023-05-18 22:53:46

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2022-32766

Intel » Compute Stick Stk2mv64cc Firmware
Versions before (<) ccsklm5v.0067
cpe:2.3:o:intel:compute_stick_stk2mv64cc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Compute Stick Stk2mv64cc » Version: N/A

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.2	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N	0.8	5.8	Intel Corporation
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: None

Jump to