2023-05-10 18:00:27 +02:00
{
"id" : "CVE-2022-36339" ,
"sourceIdentifier" : "secure@intel.com" ,
"published" : "2023-05-10T14:15:13.343" ,
2023-05-22 16:00:34 +00:00
"lastModified" : "2023-05-22T14:19:32.360" ,
"vulnStatus" : "Analyzed" ,
2023-05-10 18:00:27 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access."
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-05-22 16:00:34 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
} ,
2023-05-10 18:00:27 +02:00
{
"source" : "secure@intel.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 6.0
}
]
} ,
2023-05-22 16:00:34 +00:00
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm8i3cb4n_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "cbwhl357.0101" ,
"matchCriteriaId" : "D278CC72-4DED-47F8-8CF3-1D01BFD82590"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm8i3cb4n:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "644231E7-269C-4298-926B-2364618FADF2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm8i5cb8n_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "cbwhl357.0101" ,
"matchCriteriaId" : "142CF736-8CBA-4DED-AB6E-70BEBB37E54E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm8i5cb8n:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "353CCB24-3871-4EFA-A4BC-C5B64C8641A2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm8i7cb8n_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "cbwhl357.0101" ,
"matchCriteriaId" : "B27D1122-2108-4CF1-AE32-A7B86A6BB6BB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm8i7cb8n:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F6B7C379-1481-4EED-948E-BAD56C2C0DD1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm8ccb4r_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "cbwhl357.0101" ,
"matchCriteriaId" : "7C17BC45-3BDA-457A-8BF6-34EDF824658D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm8ccb4r:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "952B3E8C-D67E-43FB-8D37-98DD5FA82F1F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm8pcb4r_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "cbwhl357.0101" ,
"matchCriteriaId" : "3998A6E3-B72D-46EE-9C50-8E03BFD09F01"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm8pcb4r:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7327512-6766-4855-8D7D-CEB31ED2294E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm11ebi38w_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "ebtgl357.0071" ,
"matchCriteriaId" : "4B3515FE-8CFC-426A-8AF7-9678B700956F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm11ebi38w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "44B7FCD6-B55E-4A7A-A241-1D5C8A2DD094"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm11ebi58w_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "ebtgl357.0071" ,
"matchCriteriaId" : "D1AF10BE-7AEC-4365-B09F-87817857712C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm11ebi58w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B538720E-ABEC-4F35-B644-D0B7CECA25E7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm11ebi716w_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "ebtgl357.0071" ,
"matchCriteriaId" : "781BD033-765A-4B25-8DFD-B0B6A89F707A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm11ebi716w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2B22F068-6F55-4A6C-B594-9111432D42F7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:cm11ebc4w_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "ebtgl357.0071" ,
"matchCriteriaId" : "043EC938-93F6-469B-9C36-141477A9F774"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:cm11ebc4w:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "043A987B-5BF2-4A7B-BC0E-8076EC801E9D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:elm12hbi3_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "hbadl357.0052" ,
"matchCriteriaId" : "4019597F-9545-4E5B-8C60-8AA681A89772"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:elm12hbi3:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F22E1152-5C32-483C-8955-69A7D7D0D201"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:elm12hbi5_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "hbadl357.0052" ,
"matchCriteriaId" : "A4D3E272-85A1-45A3-9BF1-A73F306F6E0A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:elm12hbi5:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0DB27E68-694B-4F2A-8FAD-A76EB256DF85"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:elm12hbi7_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "hbadl357.0052" ,
"matchCriteriaId" : "2A850B8E-8DFA-4A1E-8354-7D6A8C78978C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:elm12hbi7:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F9B1F8A-61D8-40CF-94AB-CE93124625A4"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:intel:elm12hbc_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "hbadl357.0052" ,
"matchCriteriaId" : "E2DFE648-6B04-4A11-8A2A-4FDA2862039C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:intel:elm12hbc:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F3FFCC06-3936-4F03-B89B-52C4A52D8840"
}
]
}
]
}
] ,
2023-05-10 18:00:27 +02:00
"references" : [
{
"url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html" ,
2023-05-22 16:00:34 +00:00
"source" : "secure@intel.com" ,
"tags" : [
"Vendor Advisory"
]
2023-05-10 18:00:27 +02:00
}
]
}