CVE-2022-34147

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-05-10 · updated 2026-06-17
Weakness: CWE-20

Description

Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Cm8Ccb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I3Cb4N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I5Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8I7Cb8N Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Cm8Pcb4R Firmware: before cbwhl357.0101 — fixed in cbwhl357.0101
Intel Lapqc71A Firmware: before qccfl357.0158 — fixed in qccfl357.0158
Intel Lapqc71B Firmware: before qccfl357.0158 — fixed in qccfl357.0158
Intel Lapqc71C Firmware: before qccfl357.0158 — fixed in qccfl357.0158
Intel Lapqc71D Firmware: before qccfl357.0158 — fixed in qccfl357.0158
Intel Nuc10I3Fnh Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhf Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhfa Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhja Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnhn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnk Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I3Fnkn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnh Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnhca Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnhf Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnhj Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnhja Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnhn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnk Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnkn Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnkp Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I5Fnkpa Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I7Fnh Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I7Fnhaa Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I7Fnhc Firmware: before fncml357.0059 — fixed in fncml357.0059
Intel Nuc10I7Fnhja Firmware: before fncml357.0059 — fixed in fncml357.0059

How to fix

Upgrade to a fixed version: Intel Cm8Ccb4R Firmware cbwhl357.0101; Intel Cm8I3Cb4N Firmware cbwhl357.0101; Intel Cm8I5Cb8N Firmware cbwhl357.0101; Intel Cm8I7Cb8N Firmware cbwhl357.0101; Intel Cm8Pcb4R Firmware cbwhl357.0101; Intel Lapqc71A Firmware qccfl357.0158; Intel Lapqc71B Firmware qccfl357.0158; Intel Lapqc71C Firmware qccfl357.0158; Intel Lapqc71D Firmware qccfl357.0158; Intel Nuc10I3Fnh Firmware fncml357.0059; Intel Nuc10I3Fnhf Firmware fncml357.0059; Intel Nuc10I3Fnhfa Firmware fncml357.0059. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-34147 or the next vulnerability affects your stack