CVE-2022-34147

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-34147
Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:h:intel:lapqc71a:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71a_firmware:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:h:intel:lapqc71b:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71b_firmware:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:h:intel:lapqc71c:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71c_firmware:*:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:h:intel:lapqc71d:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71d_firmware:*:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnh:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnh_firmware:*:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnhf:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhf_firmware:*:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnhfa:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhfa_firmware:*:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnhja:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhja_firmware:*:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnhn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhn_firmware:*:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnk:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnk_firmware:*:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:h:intel:nuc10i3fnkn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnkn_firmware:*:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:h:intel:nuc10i5fnh:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnh_firmware:*:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnhca_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhca:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnhf_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhf:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnhja_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhja:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnhj_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhj:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnhn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhn:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnk:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnkn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkn:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnkpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkpa:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:intel:nuc10i5fnkp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkp:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnh:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnhaa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhaa:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnhc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhc:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnhja_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhja:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnhn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhn:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnk:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnkn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkn:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnkp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkp:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:intel:nuc10i7fnkpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkpa:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:intel:cm8i3cb4n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i3cb4n:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:intel:cm8i5cb8n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i5cb8n:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:intel:cm8i7cb8n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i7cb8n:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:intel:cm8ccb4r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8ccb4r:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:intel:cm8pcb4r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8pcb4r:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:intel:nuc8i3pnb_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnb:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:intel:nuc8i3pnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnh:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:intel:nuc8i3pnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnk:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:intel:nuc9i5qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i5qn:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:intel:nuc9i7qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i7qn:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:intel:nuc9i9qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i9qn:-:*:*:*:*:*:*:*
History

22 May 2023, 14:15

Type Values Removed Values Added
CWE NVD-CWE-noinfo
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html - Vendor Advisory
CPE cpe:2.3:o:intel:nuc10i7fnhja_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkpa:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnkp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnhc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhja_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnhaa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i7qn:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkp:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnkn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:lapqc71a:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:lapqc71b:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8ccb4r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnk:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i9qn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc8i3pnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnkn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhj:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:cm8ccb4r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:cm8pcb4r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhja:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8pcb4r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i7cb8n:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:lapqc71c:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnhn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnkn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhc:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:cm8i7cb8n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnhj_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhja:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc9i7qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnhfa:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnkn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc8i3pnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhfa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnhja_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkn:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkp:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnhn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc9i9qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i5cb8n:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc8i3pnb_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc9i5qn:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnk:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnkpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc9i5qn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhn:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i7fnhaa:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnhf:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:lapqc71d:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhca:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhf:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnhf_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:cm8i3cb4n:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnhja:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:lapqc71b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnhn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc8i3pnb:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnkpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnhn:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnhf_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnk_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i3fnkn:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc10i5fnkpa:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnhca_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i3fnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:cm8i3cb4n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:cm8i5cb8n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i5fnh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:nuc10i7fnkp_firmware:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

10 May 2023, 14:38

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-10 14:15

Updated : 2024-02-04 23:37

NVD link : CVE-2022-34147

Mitre link : CVE-2022-34147

CVE.ORG link : CVE-2022-34147

JSON object : View

Products Affected

intel

  • nuc10i3fnhfa
  • nuc10i7fnhja
  • nuc10i3fnhja
  • nuc10i3fnhn
  • nuc10i5fnhj
  • nuc10i7fnhc_firmware
  • cm8ccb4r
  • nuc9i9qn_firmware
  • nuc10i7fnhaa
  • cm8pcb4r_firmware
  • nuc8i3pnb_firmware
  • nuc10i7fnkn
  • nuc10i7fnkpa
  • nuc10i3fnhf_firmware
  • nuc10i3fnhf
  • cm8i5cb8n_firmware
  • nuc10i3fnk
  • nuc10i5fnkp_firmware
  • nuc10i5fnhf
  • nuc10i3fnkn
  • nuc10i5fnkn_firmware
  • nuc9i7qn
  • nuc10i5fnkpa_firmware
  • nuc10i7fnkp
  • nuc8i3pnb
  • nuc10i3fnhn_firmware
  • nuc10i3fnhfa_firmware
  • nuc9i7qn_firmware
  • cm8i5cb8n
  • nuc10i5fnkpa
  • nuc10i5fnhca_firmware
  • nuc10i7fnhn_firmware
  • nuc10i5fnkp
  • nuc10i7fnhja_firmware
  • nuc10i7fnk
  • cm8ccb4r_firmware
  • lapqc71c_firmware
  • nuc10i7fnhn
  • nuc10i7fnh_firmware
  • nuc10i3fnh_firmware
  • nuc10i5fnkn
  • lapqc71b
  • nuc10i5fnhj_firmware
  • nuc8i3pnh_firmware
  • cm8i3cb4n_firmware
  • cm8pcb4r
  • nuc10i5fnhn
  • nuc8i3pnh
  • lapqc71a_firmware
  • nuc10i5fnk_firmware
  • nuc10i7fnh
  • nuc10i5fnhca
  • nuc10i5fnh_firmware
  • nuc10i5fnhn_firmware
  • cm8i3cb4n
  • nuc10i7fnkn_firmware
  • nuc10i5fnhja
  • nuc10i5fnhja_firmware
  • lapqc71d_firmware
  • cm8i7cb8n
  • nuc8i3pnk_firmware
  • nuc10i5fnk
  • lapqc71b_firmware
  • nuc10i3fnhja_firmware
  • nuc10i5fnh
  • nuc9i5qn
  • nuc10i3fnk_firmware
  • nuc10i7fnhaa_firmware
  • nuc10i7fnkpa_firmware
  • nuc10i7fnhc
  • cm8i7cb8n_firmware
  • nuc10i3fnh
  • lapqc71c
  • nuc10i7fnk_firmware
  • nuc8i3pnk
  • nuc10i7fnkp_firmware
  • nuc9i5qn_firmware
  • lapqc71a
  • lapqc71d
  • nuc10i5fnhf_firmware
  • nuc9i9qn
  • nuc10i3fnkn_firmware
CWE
NVD-CWE-noinfo CWE-20

Improper Input Validation