Strix
26.1K

CVE-2022-31477

MEDIUMCVSS 4.4/10EPSS 0.17%

Last modified

CVE-2022-31477 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1
4.4/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.17%

6.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
IntelNuc11pahi3 FirmwareAll versions
IntelNuc11pahi30z FirmwareAll versions
IntelNuc11paki3 FirmwareAll versions
IntelNuc11pahi5 FirmwareAll versions
IntelNuc11pahi50z FirmwareAll versions
IntelNuc11paki5 FirmwareAll versions
IntelNuc11paqi50wa FirmwareAll versions
IntelNuc11pahi7 FirmwareAll versions
IntelNuc11pahi70z FirmwareAll versions
IntelNuc11paki7 FirmwareAll versions
IntelNuc11paqi70qa FirmwareAll versions
IntelCm11ebi38w FirmwareAll versions
IntelCm11ebi58w FirmwareAll versions
IntelCm11ebi716w FirmwareAll versions
IntelCm11ebc4w FirmwareAll versions
IntelLapbc510 FirmwareAll versions
IntelLapbc710 FirmwareAll versions
IntelLapkc51e FirmwareAll versions
IntelLapkc71e FirmwareAll versions
IntelLapkc71f FirmwareAll versions
IntelNuc11btmi7 FirmwareAll versions
IntelNuc11dbbi7 FirmwareAll versions
IntelNuc11btmi9 FirmwareAll versions
IntelNuc11dbbi9 FirmwareAll versions
IntelNuc11phki7c FirmwareAll versions
IntelNuc11phki7caa FirmwareAll versions
IntelNuc11tnkv50z FirmwareAll versions
IntelNuc11tnhv70l FirmwareAll versions
IntelNuc11tnhv50l FirmwareAll versions
IntelNuc11tnkv5 FirmwareAll versions
IntelNuc11tnkv7 FirmwareAll versions
IntelNuc11tnhv5 FirmwareAll versions
IntelNuc11tnhv7 FirmwareAll versions
IntelNuc11tnbv7 FirmwareAll versions
IntelNuc11tnbv5 FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-31477?
Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
How severe is CVE-2022-31477?
CVE-2022-31477 has a CVSS score of 4.4/10 (MEDIUM severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2022-31477?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-31477?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST