CVE-2022-27229 - OpenCVE

Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Intel	Nuc 7 Business Nuc7i3dnktc Nuc 7 Business Nuc7i5dnkpu Nuc Kit Nuc7i7dnhe Nuc Kit Nuc7i3dnhe Nuc 7 Business Nuc7i3dnhnc Nuc Kit Nuc7i7dnke Nuc Kit Nuc7i5dnke Nuc 7 Business Nuc7i5dnkpc Hdmi Firmware Nuc Kit Nuc7i3dnke Nuc Kit Nuc7i5dnhe

Configuration 1 [-]

AND

cpe:2.3:o:intel:hdmi_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:::::::*

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html	Patch Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: intel

Published: 2023-11-14T19:04:44.747Z

Updated: 2023-11-14T19:04:44.747Z

Reserved: 2022-03-21T23:31:41.440Z

Link: CVE-2022-27229

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-11-14T19:15:10.813

Modified: 2023-11-20T20:53:38.613

Link: CVE-2022-27229

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:hdmi_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF6754EE-BF82-445C-9C8D-88E60039FC8A", "versionEndExcluding": "1.79.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:*:*:*:*:*:*:*", "matchCriteriaId": "3204F73F-448F-4D27-91EC-0B51EDA52563", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5A34B36-9883-4614-AA99-909386365342", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:*:*:*:*:*:*:*", "matchCriteriaId": "97BE736A-7802-4DBC-83EF-DA94C32CFFFA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7904A205-3072-46AB-88E6-3EBEA1E53BD4", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "3143ABA5-9741-4CD2-AB9A-A7600EA6E32F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "97A8937C-5050-436C-B08C-1CA8F1F49FA6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E845C54-797F-4DAC-87ED-D5FDEDBAC5D6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EF7E820-8567-4E9A-8247-5E1665FFF8BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "550295DC-BA99-4A39-AF81-6109D4955B36", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DFDFEB2-B10D-489E-B51C-10FA84E65858", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "Path transversal en Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN Software de herramienta de actualizaci\u00f3n de firmware HDMI anteriores a la versi\u00f3n 1.79.1.1 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."}], "id": "CVE-2022-27229", "lastModified": "2023-11-20T20:53:38.613", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@intel.com", "type": "Secondary"}]}, "published": "2023-11-14T19:15:10.813", "references": [{"source": "secure@intel.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-249"}], "source": "secure@intel.com", "type": "Secondary"}]}