Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.html | Vendor Advisory |
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.html - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
22 May 2023, 14:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:intel:nuc_8_rugged_kit_nuc8cchkr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_board_nuc8cchb:-:*:*:*:*:*:*:* cpe:2.3:a:intel:iflashv:*:*:*:*:*:windows:*:* |
|
| References | (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.html - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-428 |
10 May 2023, 14:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-10 14:15
Updated : 2024-11-21 07:15
NVD link : CVE-2022-38101
Mitre link : CVE-2022-38101
CVE.ORG link : CVE-2022-38101
JSON object : View
Products Affected
intel
- nuc_board_nuc8cchb
- nuc_8_rugged_kit_nuc8cchkr
- iflashv