CVE-2022-37345: High severity intel nuc5i3ryh firmware vulnerability
Published Nov 11, 2022
·Updated
Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
32 affected components
All of the following
Intel Nuc Kit Nuc5i3ryh Firmware<ry0386
Intel Nuc Kit Nuc5i3ryh
All of the following
Intel Nuc Kit Nuc5i7ryh Firmware<ry0386
Intel Nuc Kit Nuc5i7ryh
All of the following
Intel Nuc Kit Nuc5i5ryk Firmware<ry0386
Intel Nuc Kit Nuc5i5ryk
All of the following
Intel Nuc Kit Nuc5i5ryh Firmware<ry0386
Intel Nuc Kit Nuc5i5ryh
All of the following
Intel Nuc Kit Nuc5i3ryk Firmware<ry0386
Intel Nuc Kit Nuc5i3ryk
All of the following
Intel Nuc Kit Nuc5i5ryhs Firmware<ry0386
Intel Nuc Kit Nuc5i5ryhs
All of the following
Intel Nuc Kit Nuc5i3ryhs Firmware<ry0386
Intel Nuc Kit Nuc5i3ryhs
All of the following
Intel Nuc Kit Nuc5i3ryhsn Firmware<ry0386
Intel Nuc Kit Nuc5i3ryhsn
Intel Nuc Kit Nuc5i3ryh Firmware<ry0386
Intel Nuc Kit Nuc5i3ryh
Intel Nuc Kit Nuc5i7ryh Firmware<ry0386
Intel Nuc Kit Nuc5i7ryh
Intel Nuc Kit Nuc5i5ryk Firmware<ry0386
Intel Nuc Kit Nuc5i5ryk
Intel Nuc Kit Nuc5i5ryh Firmware<ry0386
Intel Nuc Kit Nuc5i5ryh
Intel Nuc Kit Nuc5i3ryk Firmware<ry0386
Intel Nuc Kit Nuc5i3ryk
Intel Nuc Kit Nuc5i5ryhs Firmware<ry0386
Intel Nuc Kit Nuc5i5ryhs
Intel Nuc Kit Nuc5i3ryhs Firmware<ry0386
Intel Nuc Kit Nuc5i3ryhs
Intel Nuc Kit Nuc5i3ryhsn Firmware<ry0386
Intel Nuc Kit Nuc5i3ryhsn
Remediation
Event History
Nov 11, 2022
CVE Published
via MITRE·03:48 PM
Data Sourced
via MITRE·03:48 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-37345?
CVE-2022-37345 is a vulnerability in the BIOS firmware for some Intel NUC Kits before version RY0386.
2
How severe is CVE-2022-37345?
CVE-2022-37345 has a severity rating of 7.8 out of 10.
3
How does CVE-2022-37345 affect Intel NUC Kits?
CVE-2022-37345 may allow an authenticated user to potentially enable escalation of privilege via local access.
4
Which Intel NUC Kits are affected by CVE-2022-37345?
Intel NUC Kits NUC5i3RYH, NUC5i7RYH, NUC5i5RYK, NUC5i3RYK, NUC5i5RYHS, NUC5i3RYHS, and NUC5i3RYHSN before version RY0386 are affected by CVE-2022-37345.
5
How can I fix CVE-2022-37345?
To fix CVE-2022-37345, you need to update the BIOS firmware of your affected Intel NUC Kit to version RY0386 or later.