CVE-2022-36372

Katalog CVE

CVSS 6.7 · Medium EPSS 0,16%

Kerentanan DEPRECATED: Improper Sanitization of Custom Special Characters pada intel nuc 8 compute element cm8i3cb4n firmware, intel nuc 8 compute element cm8i5cb8n firmware +32 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Rincian

Terbit di NVD

11 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-92: DEPRECATED: Improper Sanitization of Custom Special Characters
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html patch · advisory vendor