CVE & CISA-KEV Catalog

CVE-2022-37327

MEDIUM
6.1
CVSS v3
NVD

Description

Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

CWE-20Improper Input Validation

How to fix

Remediation Available
cm11ebc4w firmwareNVD
Affected:< ebtgl357.0071Fixed in:ebtgl357.0071CVE-2022-37327derived from NVD
cm11ebi38w firmwareNVD
Affected:< ebtgl357.0071Fixed in:ebtgl357.0071CVE-2022-37327derived from NVD
cm11ebi58w firmwareNVD
Affected:< ebtgl357.0071Fixed in:ebtgl357.0071CVE-2022-37327derived from NVD
cm11ebi716w firmwareNVD
Affected:< ebtgl357.0071Fixed in:ebtgl357.0071CVE-2022-37327derived from NVD
cm8ccb4r firmwareNVD
Affected:< cbwhl357.0101Fixed in:cbwhl357.0101CVE-2022-37327derived from NVD
cm8i3cb4n firmwareNVD
Affected:< cbwhl357.0101Fixed in:cbwhl357.0101CVE-2022-37327derived from NVD
cm8i5cb8n firmwareNVD
Affected:< cbwhl357.0101Fixed in:cbwhl357.0101CVE-2022-37327derived from NVD
cm8i7cb8n firmwareNVD
Affected:< cbwhl357.0101Fixed in:cbwhl357.0101CVE-2022-37327derived from NVD
cm8pcb4r firmwareNVD
Affected:< cbwhl357.0101Fixed in:cbwhl357.0101CVE-2022-37327derived from NVD
elm12hbc firmwareNVD
Affected:< hbadl357.0052Fixed in:hbadl357.0052CVE-2022-37327derived from NVD
elm12hbi3 firmwareNVD
Affected:< hbadl357.0052Fixed in:hbadl357.0052CVE-2022-37327derived from NVD
elm12hbi5 firmwareNVD
Affected:< hbadl357.0052Fixed in:hbadl357.0052CVE-2022-37327derived from NVD
elm12hbi7 firmwareNVD
Affected:< hbadl357.0052Fixed in:hbadl357.0052CVE-2022-37327derived from NVD
lapac71g firmwareNVD
Affected:< acadl357.0059Fixed in:acadl357.0059CVE-2022-37327derived from NVD
lapac71h firmwareNVD
Affected:< acadl357.0059Fixed in:acadl357.0059CVE-2022-37327derived from NVD
lapbc510 firmwareNVD
Affected:< bctgl357.0078Fixed in:bctgl357.0078CVE-2022-37327derived from NVD
lapbc710 firmwareNVD
Affected:< bctgl357.0078Fixed in:bctgl357.0078CVE-2022-37327derived from NVD
lapkc51e firmwareNVD
Affected:< kctgl357.0044Fixed in:kctgl357.0044CVE-2022-37327derived from NVD
lapkc71e firmwareNVD
Affected:< kctgl357.0044Fixed in:kctgl357.0044CVE-2022-37327derived from NVD
lapkc71f firmwareNVD
Affected:< kctgl357.0044Fixed in:kctgl357.0044CVE-2022-37327derived from NVD
laprc510 firmwareNVD
Affected:< rcadl357.0060Fixed in:rcadl357.0060CVE-2022-37327derived from NVD
laprc710 firmwareNVD
Affected:< rcadl357.0060Fixed in:rcadl357.0060CVE-2022-37327derived from NVD
nuc10i3fnh firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnhf firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnhfa firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnhja firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnhn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnk firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i3fnkn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnh firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnhca firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnhf firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnhj firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnhja firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnhn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnk firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnkn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnkp firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i5fnkpa firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnh firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnhaa firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnhc firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnhja firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnhn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnk firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnkn firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnkp firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc10i7fnkpa firmwareNVD
Affected:< fncml357.0059Fixed in:fncml357.0059CVE-2022-37327derived from NVD
nuc11atbc4 firmwareNVD
Affected:< atjslcpx.0038Fixed in:atjslcpx.0038CVE-2022-37327derived from NVD
nuc11atkc2 firmwareNVD
Affected:< atjslcpx.0038Fixed in:atjslcpx.0038CVE-2022-37327derived from NVD
nuc11atkc4 firmwareNVD
Affected:< atjslcpx.0038Fixed in:atjslcpx.0038CVE-2022-37327derived from NVD
nuc11atkpe firmwareNVD
Affected:< atjslcpx.0038Fixed in:atjslcpx.0038CVE-2022-37327derived from NVD
nuc11btmi7 firmwareNVD
Affected:< dbtgl579.0065Fixed in:dbtgl579.0065CVE-2022-37327derived from NVD
nuc11btmi9 firmwareNVD
Affected:< dbtgl579.0065Fixed in:dbtgl579.0065CVE-2022-37327derived from NVD
nuc11dbbi7 firmwareNVD
Affected:< dbtgl579.0065Fixed in:dbtgl579.0065CVE-2022-37327derived from NVD
nuc11dbbi9 firmwareNVD
Affected:< dbtgl579.0065Fixed in:dbtgl579.0065CVE-2022-37327derived from NVD
nuc11phki7c firmwareNVD
Affected:< phtgl579.0071Fixed in:phtgl579.0071CVE-2022-37327derived from NVD
nuc11phki7caa firmwareNVD
Affected:< phtgl579.0071Fixed in:phtgl579.0071CVE-2022-37327derived from NVD
nuc11tnbi30z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnbi3 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnbi50z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnbi5 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnbi70z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnbi7 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi30l firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi30p firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi30z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi3 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi50l firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi50w firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi50z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi5 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi70l firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi70q firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi70z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnhi7 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki30z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki3 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki50z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki5 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki70z firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc11tnki7 firmwareNVD
Affected:< tntgl357.0070Fixed in:tntgl357.0070CVE-2022-37327derived from NVD
nuc12dcmi7 firmwareNVD
Affected:< edadl579.0056Fixed in:edadl579.0056CVE-2022-37327derived from NVD
nuc12dcmi9 firmwareNVD
Affected:< edadl579.0056Fixed in:edadl579.0056CVE-2022-37327derived from NVD
nuc12edbi7 firmwareNVD
Affected:< edadl579.0056Fixed in:edadl579.0056CVE-2022-37327derived from NVD
nuc12edbi9 firmwareNVD
Affected:< edadl579.0056Fixed in:edadl579.0056CVE-2022-37327derived from NVD
nuc12snki72 firmwareNVD
Affected:< snadl357.0056Fixed in:snadl357.0056CVE-2022-37327derived from NVD
nuc12snki72va firmwareNVD
Affected:< snadl357.0056Fixed in:snadl357.0056CVE-2022-37327derived from NVD
nuc12wsbi30z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wsbi3 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wsbi50z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wsbi5 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wsbi70z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi30l firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi30z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi3 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi50z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi5 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi70z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wshi7 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski30z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski3 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski50z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski5 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski70z firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc12wski7 firmwareNVD
Affected:< wsadl357.0086Fixed in:wsadl357.0086CVE-2022-37327derived from NVD
nuc8cchb firmwareNVD
Affected:< chaplcel.0061Fixed in:chaplcel.0061CVE-2022-37327derived from NVD
nuc8cchbn firmwareNVD
Affected:< chaplcel.0061Fixed in:chaplcel.0061CVE-2022-37327derived from NVD
nuc8cchkr firmwareNVD
Affected:< chaplcel.0061Fixed in:chaplcel.0061CVE-2022-37327derived from NVD
nuc8i3pnb firmwareNVD
Affected:< pnwhl357.0050Fixed in:pnwhl357.0050CVE-2022-37327derived from NVD
nuc8i3pnh firmwareNVD
Affected:< pnwhl357.0050Fixed in:pnwhl357.0050CVE-2022-37327derived from NVD
nuc8i3pnk firmwareNVD
Affected:< pnwhl357.0050Fixed in:pnwhl357.0050CVE-2022-37327derived from NVD
nuc9v7qnb firmwareNVD
Affected:< qncflx70.0071Fixed in:qncflx70.0071CVE-2022-37327derived from NVD
nuc9v7qnx firmwareNVD
Affected:< qncflx70.0071Fixed in:qncflx70.0071CVE-2022-37327derived from NVD
nuc9vxqnb firmwareNVD
Affected:< qncflx70.0071Fixed in:qncflx70.0071CVE-2022-37327derived from NVD
nuc9vxqnx firmwareNVD
Affected:< qncflx70.0071Fixed in:qncflx70.0071CVE-2022-37327derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredHigh
User InteractionNone
ScopeChanged

Impact

ConfidentialityHigh
IntegrityLow
AvailabilityNone

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

Exploit Intelligence

0.18%probability of exploitation in 30 days
7thpercentile

Low risk: more likely to be exploited than 7% of all known CVEs.

References

Vendor Advisory1

Related Vulnerabilities

Other CWE-20 (Improper Input Validation) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2024-3400Critical10.0100%KEV + Ransom-
CVE-2021-45105Medium5.9100%-Fix
CVE-2021-44228Critical10.0100%KEV + RansomFix
CVE-2021-21985Critical9.8100%KEV + RansomFix
CVE-2018-7600Critical9.8100%KEV + RansomFix
CVE-2020-3452High7.5100%KEVFix
Embed a live status badge for CVE-2022-37327
CVE-2022-37327 severity badge

Markdown

[![CVE-2022-37327](https://tridentstack.com/cve/badge/CVE-2022-37327.svg)](https://tridentstack.com/cve/CVE-2022-37327)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-37327"><img src="https://tridentstack.com/cve/badge/CVE-2022-37327.svg" alt="CVE-2022-37327"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.