What’s Vulnerable › Vulnerabilities

CVE-2022-24382

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-12 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Lapbc510 Firmware: before bctgl357.0065 — fixed in bctgl357.0065
• Intel Lapbc710 Firmware: before bctgl357.0065 — fixed in bctgl357.0065
• Intel Lapkc51E Firmware: before kctgl357.0040 — fixed in kctgl357.0040
• Intel Lapkc71E Firmware: before kctgl357.0040 — fixed in kctgl357.0040
• Intel Lapkc71F Firmware: before kctgl357.0040 — fixed in kctgl357.0040
• Intel Nuc11Btmi7 Firmware: before dbtgl579.0055 — fixed in dbtgl579.0055
• Intel Nuc11Btmi9 Firmware: before dbtgl579.0055 — fixed in dbtgl579.0055
• Intel Nuc11Dbbi7 Firmware: before dbtgl579.0055 — fixed in dbtgl579.0055
• Intel Nuc11Dbbi9 Firmware: before dbtgl579.0055 — fixed in dbtgl579.0055
• Intel Nuc11Pa Firmware: before patgl357.0042 — fixed in patgl357.0042
• Intel Nuc11Pah Firmware: before patgl357.0042 — fixed in patgl357.0042
• Intel Nuc11Paq Firmware: before patgl357.0042 — fixed in patgl357.0042
• Intel Nuc8I3Cysm Firmware: before cycnli35.86a.0050 — fixed in cycnli35.86a.0050
• Intel Nuc8I3Cysn Firmware: before cycnli35.86a.0050 — fixed in cycnli35.86a.0050
• Intel Nuc9I5Qn Firmware: before qxcfl579.0064 — fixed in qxcfl579.0064
• Intel Nuc9I7Qn Firmware: before qxcfl579.0064 — fixed in qxcfl579.0064
• Intel Nuc9I9Qn Firmware: before qxcfl579.0064 — fixed in qxcfl579.0064
• Intel Nuc 11 Compute Element Cm11Ebc4W Firmware: before ebtgl357.0057 — fixed in ebtgl357.0057
• Intel Nuc 11 Compute Element Cm11Ebi38W Firmware: before ebtgl357.0057 — fixed in ebtgl357.0057
• Intel Nuc 11 Compute Element Cm11Ebi58W Firmware: before ebtgl357.0057 — fixed in ebtgl357.0057
• Intel Nuc 11 Compute Element Cm11Ebi716W Firmware: before ebtgl357.0057 — fixed in ebtgl357.0057
• Intel Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware: before phtgl579.0064 — fixed in phtgl579.0064
• Intel Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware: before phtgl579.0064 — fixed in phtgl579.0064
• Intel Nuc 11 Pro Board Nuc11Tnbi30Z Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Board Nuc11Tnbi3 Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Board Nuc11Tnbi50Z Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Board Nuc11Tnbi5 Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Board Nuc11Tnbi70Z Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Board Nuc11Tnbi7 Firmware: before tntgl357.0059 — fixed in tntgl357.0059
• Intel Nuc 11 Pro Kit Nuc11Tnhi30L Firmware: before tntgl357.0059 — fixed in tntgl357.0059

How to fix

Upgrade to a fixed version: Intel Lapbc510 Firmware bctgl357.0065; Intel Lapbc710 Firmware bctgl357.0065; Intel Lapkc51E Firmware kctgl357.0040; Intel Lapkc71E Firmware kctgl357.0040; Intel Lapkc71F Firmware kctgl357.0040; Intel Nuc11Btmi7 Firmware dbtgl579.0055; Intel Nuc11Btmi9 Firmware dbtgl579.0055; Intel Nuc11Dbbi7 Firmware dbtgl579.0055; Intel Nuc11Dbbi9 Firmware dbtgl579.0055; Intel Nuc11Pa Firmware patgl357.0042; Intel Nuc11Pah Firmware patgl357.0042; Intel Nuc11Paq Firmware patgl357.0042. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html

Get alerted when CVE-2022-24382 or the next vulnerability affects your stack