First published: Thu Aug 18 2022(Updated: )
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Lapbc510 Firmware | <bc0076 | |
Intel Lapbc510 | ||
Intel Lapbc710 Firmware | <bc0076 | |
Intel Lapbc710 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-34345 is a vulnerability in the firmware for Intel(R) NUC Laptop Kits before version BC0076 that allows a privileged user to potentially enable escalation of privilege via physical access.
CVE-2022-34345 affects Intel Lapbc510 Firmware versions up to (but not including) BC0076 and potentially allows a privileged user to enable escalation of privilege via physical access.
No, Intel Lapbc510 is not vulnerable to CVE-2022-34345.
CVE-2022-34345 affects Intel Lapbc710 Firmware versions up to (but not including) BC0076 and potentially allows a privileged user to enable escalation of privilege via physical access.
No, Intel Lapbc710 is not vulnerable to CVE-2022-34345.
The severity of CVE-2022-34345 is medium with a CVSS score of 6.2.
To fix CVE-2022-34345, users of Intel NUC Laptop Kits should update the firmware to version BC0076 or later as recommended by Intel.