CVE-2022-24297

VendorintelProductnuc 11 compute element cm11ebi38w firmware, nuc 11 compute element cm11ebi58w firmware, nuc 11 compute element cm11ebi716w firmware, lapbc510 firmware, lapbc710 firmware, nuc 11 compute element cm11ebc4w firmware, lapkc51e firmware, lapkc71e firmware, lapkc71f firmware, nuc11btmi7 firmware, nuc11btmi9 firmware, nuc11dbbi7 firmware, nuc11dbbi9 firmware, nuc11pa firmware, nuc11pah firmware, nuc11paq firmware, nuc 11 pro board nuc11tnbi30z firmware, nuc 11 pro board nuc11tnbi50z firmware, nuc 11 pro board nuc11tnbi70z firmware, nuc 11 pro kit nuc11tnhi30z firmware, nuc 11 pro kit nuc11tnhi50z firmware, nuc 11 pro kit nuc11tnhi70z firmware, nuc 11 pro kit nuc11tnki30z firmware, nuc 11 pro kit nuc11tnki50z firmware, nuc 11 pro kit nuc11tnki70z firmwareDiscoveredMay 12, 2022UpdatedMay 5, 2025

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

View graph Watch Export

CVSS v3.1

6.7 MEDIUM

EPSS

0.24%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 3, 2026

● 0.01pp

0.23% → 0.24% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Connections

25 relationships