7.8
CWE
20
Advisory Published
Updated

CVE-2022-36339: Input Validation

First published: Wed May 10 2023(Updated: )

Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel Cm8i3cb4n Firmware<cbwhl357.0101
Intel Cm8i3cb4n
Intel Cm8i5cb8n Firmware<cbwhl357.0101
Intel Cm8i5cb8n
Intel Cm8i7cb8n Firmware<cbwhl357.0101
Intel Cm8i7cb8n
Intel Cm8ccb4r Firmware<cbwhl357.0101
Intel Cm8ccb4r
Intel Cm8pcb4r Firmware<cbwhl357.0101
Intel Cm8pcb4r
Intel Cm11ebi38w Firmware<ebtgl357.0071
Intel Cm11ebi38w
Intel Cm11ebi58w Firmware<ebtgl357.0071
Intel Cm11ebi58w
Intel Cm11ebi716w Firmware<ebtgl357.0071
Intel Cm11ebi716w
Intel Cm11ebc4w Firmware<ebtgl357.0071
Intel Cm11ebc4w
Intel Elm12hbi3 Firmware<hbadl357.0052
Intel Elm12hbi3
Intel Elm12hbi5 Firmware<hbadl357.0052
Intel Elm12hbi5
Intel Elm12hbi7 Firmware<hbadl357.0052
Intel Elm12hbi7
Intel Elm12hbc Firmware<hbadl357.0052
Intel Elm12hbc

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this issue?

    The vulnerability ID for this issue is CVE-2022-36339.

  • What is the severity of CVE-2022-36339?

    The severity of CVE-2022-36339 is high.

  • Which software is affected by CVE-2022-36339?

    Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, and Intel(R) NUC 12 Compute Element firmware versions cbwhl357.0101 and earlier are affected by CVE-2022-36339.

  • How does CVE-2022-36339 enable escalation of privilege?

    CVE-2022-36339 allows a privileged user to enable escalation of privilege via local access.

  • How can I fix CVE-2022-36339?

    To fix CVE-2022-36339, update the firmware of your Intel NUC 8, NUC 11, or NUC 12 Compute Element to a version later than cbwhl357.0101.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203