CVE-2022-35276 : Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow

Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access.

Published 2022-11-11 16:15:15

Updated 2022-11-16 18:56:09

Source Intel Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-35276

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-35276

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.5	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	Intel Corporation
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

Products affected by CVE-2022-35276

Intel » Nuc 8 Compute Element Cm8ccb Firmware
Versions before (<) cbwhl357.0096
cpe:2.3:o:intel:nuc_8_compute_element_cm8ccb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Compute Element Cm8ccb » Version: N/A
Intel » Nuc 8 Compute Element Cm8i3cb Firmware
Versions before (<) cbwhl357.0096
cpe:2.3:o:intel:nuc_8_compute_element_cm8i3cb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Compute Element Cm8i3cb » Version: N/A
Intel » Nuc 8 Compute Element Cm8i5cb Firmware
Versions before (<) cbwhl357.0096
cpe:2.3:o:intel:nuc_8_compute_element_cm8i5cb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Compute Element Cm8i5cb » Version: N/A
Intel » Nuc 8 Compute Element Cm8i7cb Firmware
Versions before (<) cbwhl357.0096
cpe:2.3:o:intel:nuc_8_compute_element_cm8i7cb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Compute Element Cm8i7cb » Version: N/A
Intel » Nuc 8 Compute Element Cm8pcb Firmware
Versions before (<) cbwhl357.0096
cpe:2.3:o:intel:nuc_8_compute_element_cm8pcb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Nuc 8 Compute Element Cm8pcb » Version: N/A

Vulnerability Details : CVE-2022-35276

Exploit prediction scoring system (EPSS) score for CVE-2022-35276

CVSS scores for CVE-2022-35276

References for CVE-2022-35276

Products affected by CVE-2022-35276