CVE-2022-27229: Path Traversal
First published: Tue Nov 14 2023(Updated: )
Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Hdmi Firmware | <1.79.1.1 | |
| Intel Nuc 7 Business Nuc7i3dnhnc | ||
| Intel Nuc 7 Business Nuc7i3dnktc | ||
| Intel Nuc 7 Business Nuc7i5dnkpc | ||
| Intel Nuc 7 Business Nuc7i5dnkpu | ||
| Intel Nuc Kit Nuc7i3dnhe | ||
| Intel Nuc Kit Nuc7i3dnke | ||
| Intel Nuc Kit Nuc7i5dnhe | ||
| Intel Nuc Kit Nuc7i5dnke | ||
| Intel Nuc Kit Nuc7i7dnhe | ||
| Intel Nuc Kit Nuc7i7dnke |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-27229?
CVE-2022-27229 is a vulnerability that allows an authenticated user to potentially enable escalation of privilege via local access in certain Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1.
How severe is CVE-2022-27229?
CVE-2022-27229 has a severity score of 7.8 (high).
Which software versions are affected by CVE-2022-27229?
The Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 is affected by CVE-2022-27229.
How can an attacker exploit CVE-2022-27229?
An attacker can exploit CVE-2022-27229 by leveraging local access and potentially enabling escalation of privilege.
Is there a fix or patch available for CVE-2022-27229?
Yes, updating the Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software to version 1.79.1.1 or later will fix the vulnerability.
- collector/nvd-api
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel hdmi firmware
- canonical/intel nuc 7 business nuc7i3dnhnc
- canonical/intel nuc 7 business nuc7i3dnktc
- canonical/intel nuc 7 business nuc7i5dnkpc
- canonical/intel nuc 7 business nuc7i5dnkpu
- canonical/intel nuc kit nuc7i3dnhe
- canonical/intel nuc kit nuc7i3dnke
- canonical/intel nuc kit nuc7i5dnhe
- canonical/intel nuc kit nuc7i5dnke
- canonical/intel nuc kit nuc7i7dnhe
- canonical/intel nuc kit nuc7i7dnke