VULNERABILITY INTELLIGENCE
CVE-2022-36349
CVSS score5.2 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Description
Insecure default variable initialization in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access.
Weakness classification
- nvd@nist.gov: CWE-1188
Primary references
- secure@intel.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory