CVE-2022-36372: Buffer Overflow

Published Aug 11, 2023
·
Updated

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Software

68 affected components
Intel Nuc 8 Compute Element Cm8i3cb4n Firmware
Intel Nuc 8 Compute Element Cm8i3cb4n
Intel Nuc 8 Compute Element Cm8i5cb8n Firmware
Intel Nuc 8 Compute Element Cm8i5cb8n
Intel Nuc 8 Compute Element Cm8i7cb8n Firmware
Intel Nuc 8 Compute Element Cm8i7cb8n
Intel Nuc 8 Compute Element Cm8ccb4r Firmware
Intel Nuc 8 Compute Element Cm8ccb4r
Intel Nuc 8 Compute Element Cm8pcb4r Firmware
Intel Nuc 8 Compute Element Cm8pcb4r
Intel Nuc Pro Kit Nuc8i3pnb Firmware
Intel Nuc Pro Kit Nuc8i3pnb
Intel Nuc Pro Kit Nuc8i3pnh Firmware
Intel Nuc Pro Kit Nuc8i3pnh
Intel Nuc Pro Kit Nuc8i3pnk Firmware
Intel Nuc Pro Kit Nuc8i3pnk
Intel Nuc Pro Board Nuc8i3pnb Firmware
Intel Nuc Pro Board Nuc8i3pnb
Intel Nuc Pro Board Nuc8i3pnh Firmware
Intel Nuc Pro Board Nuc8i3pnh
Intel Nuc Pro Board Nuc8i3pnk Firmware
Intel Nuc Pro Board Nuc8i3pnk
Intel Nuc Rugged Kit Nuc8cchb Firmware
Intel Nuc Rugged Kit Nuc8cchb
Intel Nuc Rugged Kit Nuc8cchbn Firmware
Intel Nuc Rugged Kit Nuc8cchbn
Intel Nuc Rugged Kit Nuc8cchkrn Firmware
Intel Nuc Rugged Kit Nuc8cchkrn
Intel Nuc Rugged Kit Nuc8cchkr Firmware
Intel Nuc Rugged Kit Nuc8cchkr
Intel Nuc Pro Compute Element Nuc9v7qnb Firmware
Intel Nuc Pro Compute Element Nuc9v7qnb
Intel Nuc Pro Compute Element Nuc9v7qnx Firmware
Intel Nuc Pro Compute Element Nuc9v7qnx
Intel Nuc Pro Compute Element Nuc9vxqnb Firmware
Intel Nuc Pro Compute Element Nuc9vxqnb
Intel Nuc Pro Compute Element Nuc9vxqnx Firmware
Intel Nuc Pro Compute Element Nuc9vxqnx
Intel Nuc Business Nuc8i7hnkqc Firmware
Intel Nuc Business Nuc8i7hnkqc
Intel Nuc Business Nuc8i7hvkva Firmware
Intel Nuc Business Nuc8i7hvkva
Intel Nuc Business Nuc8i7hvkvaw Firmware
Intel Nuc Business Nuc8i7hvkvaw
Intel Nuc Business Nuc8i7hvk Firmware
Intel Nuc Business Nuc8i7hvk
Intel Nuc Business Nuc8i7hnk Firmware
Intel Nuc Business Nuc8i7hnk
Intel Nuc Enthusiast Nuc8i7hnkqc Firmware
Intel Nuc Enthusiast Nuc8i7hnkqc
Intel Nuc Enthusiast Nuc8i7hvkva Firmware
Intel Nuc Enthusiast Nuc8i7hvkva
Intel Nuc Enthusiast Nuc8i7hvkvaw Firmware
Intel Nuc Enthusiast Nuc8i7hvkvaw
Intel Nuc Enthusiast Nuc8i7hvk Firmware
Intel Nuc Enthusiast Nuc8i7hvk
Intel Nuc Enthusiast Nuc8i7hnk Firmware
Intel Nuc Enthusiast Nuc8i7hnk
Intel Nuc Kit Nuc8i7hnkqc Firmware
Intel Nuc Kit Nuc8i7hnkqc
Intel Nuc Kit Nuc8i7hvkva Firmware
Intel Nuc Kit Nuc8i7hvkva
Intel Nuc Kit Nuc8i7hvkvaw Firmware
Intel Nuc Kit Nuc8i7hvkvaw
Intel Nuc Kit Nuc8i7hvk Firmware
Intel Nuc Kit Nuc8i7hvk
Intel Nuc Kit Nuc8i7hnk Firmware
Intel Nuc Kit Nuc8i7hnk

Remediation

Patch Available

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html

Event History

Aug 11, 2023
CVE Published
via MITRE·02:37 AM
Data Sourced
via MITRE·02:37 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-36372?

CVE-2022-36372 has a severity rating that indicates a potential escalation of privilege for privileged users.

2

How do I fix CVE-2022-36372?

Fixing CVE-2022-36372 involves updating the Intel NUC BIOS firmware to the latest version that addresses this vulnerability.

3

What systems are affected by CVE-2022-36372?

CVE-2022-36372 affects various models of Intel NUC 8 Compute Element and some related firmware versions.

4

Is local access required to exploit CVE-2022-36372?

Yes, local access is required for a privileged user to exploit CVE-2022-36372 and potentially escalate their privileges.

5

Who is responsible for mitigating CVE-2022-36372?

Users and administrators of affected Intel NUC systems are responsible for applying the necessary firmware updates to mitigate CVE-2022-36372.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203