1. Home
  2. CVE Database
  3. CVE-2022-37334
HIGH · 7.8

CVE-2022-37334

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation ...

Vulnerability Description

Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelNuc 11 Pro Kit Nuc11Tnhi70Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnhi70Z-
IntelNuc 11 Pro Kit Nuc11Tnki70Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnki70Z-
IntelNuc 11 Pro Kit Nuc11Tnki30Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnki30Z-
IntelNuc 11 Pro Kit Nuc11Tnhi30Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnhi30Z-
IntelNuc 11 Pro Kit Nuc11Tnki50Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnki50Z-
IntelNuc 11 Pro Kit Nuc11Tnhi50Z Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnhi50Z-
IntelNuc 11 Pro Board Nuc11Tnbi30Z Firmware< tntgl357.0064
IntelNuc 11 Pro Board Nuc11Tnbi30Z-
IntelNuc 11 Pro Board Nuc11Tnbi50Z Firmware< tntgl357.0064
IntelNuc 11 Pro Board Nuc11Tnbi50Z-
IntelNuc 11 Pro Board Nuc11Tnbi70Z Firmware< tntgl357.0064
IntelNuc 11 Pro Board Nuc11Tnbi70Z-
IntelNuc 11 Pro Kit Nuc11Tnhi3 Firmware< tntgl357.0064
IntelNuc 11 Pro Kit Nuc11Tnhi3-

Related Weaknesses (CWE)

CWE-665

References

FAQ

What is CVE-2022-37334?

CVE-2022-37334 is a vulnerability with a CVSS score of 7.8 (HIGH). Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation ...

How severe is CVE-2022-37334?

CVE-2022-37334 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-37334?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc 11 Pro Kit Nuc11Tnhi70Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnhi70Z, Intel Nuc 11 Pro Kit Nuc11Tnki70Z Firmware, Intel Nuc 11 Pro Kit Nuc11Tnki70Z, Intel Nuc 11 Pro Kit Nuc11Tnki30Z Firmware.